CVE-2026-9825

IBM Cyber Fraud Reachable Assertion PUBLISHED

Description (CNA)

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.

Affected (CNA)

Vendor / product	Versions
IBM / CyberFraud	affected 1.0.0 through 1.0.2

CWE

CWE-617

References

https://www.ibm.com/support/pages/node/7290671

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.