CVE-2026-9825

Description

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.

References

https://www.ibm.com/support/pages/node/7290671

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-106867

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS