---
id: "CVE-2026-9821"
page: "https://infrastack.ai/live/CVE-2026-9821"
kind: "vulnerability"
aliases: ["CVE-2026-9821"]
title: "IBM Cyber Fraud: unauthorized users can inject data into log files"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["ibm-cyber-fraud", "logging", "other"]
not_affected_if: []
published_at: "2026-11-13T22:17:27+00:00"
first_seen_at: "2026-11-13T22:33:35+00:00"
updated_at: "2026-11-13T22:34:40+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9821", "first_seen_at": "2026-11-13T22:33:35+00:00"}]
exploit_sources: []
---

# IBM Cyber Fraud: unauthorized users can inject data into log files

Link for people: https://infrastack.ai/live/CVE-2026-9821 (this .md is for agents)

IBM Cyber Fraud versions 1.0.0 through 1.1.0 do not neutralize special characters before writing to log files. An unauthorized user can therefore inject fake or misleading entries into the logs.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether the installed IBM Cyber Fraud version is between `1.0.0` and `1.1.0`

## Timeline

- 2026-11-13T22:33:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-9821

## From the sources

IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_