CVE-2026-87800

Vulnerability in IBM Cyber Fraud versions 1.0.0 through 1.0.2 allows a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type.

An authenticated attacker can upload a malicious file and execute arbitrary code, potentially leading to system compromise and data confidentiality loss.

Update IBM Cyber Fraud to a version later than 1.0.2 and enforce validation of uploaded file types.