CVE-2026-97683— IBM Cyber Fraud includes components with multiple known vulnerabilities
Quick assessment
Affected
IBM Cyber Fraud
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
IBM Cyber Fraud 1.0.0 至 1.1.0 版本可能允许本地攻击者利用缺失或配置错误的安全上下文来绕过安全限制。
Possible ATT&CK Techniques 2 AI
T1068 · Exploitation for Privilege Escalation T1078 · Valid AccountsAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | Cyber Fraud | 1.0.0≤ 1.1.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-97683
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM Cyber Fraud includes components with multiple known vulnerabilities
Source: CVE Program / CVE List V5
Vulnerability Description
IBM Cyber Fraud 1.0.0 through 1.1.0 could allow a local attacker to bypass security restrictions due to a missing or misconfigured security context.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
保护机制失效
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| IBM | Cyber Fraud | 1.0.0 ~ 1.1.0 |
cpe:2.3:a:ibm:cyber_fraud:1.0.0:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-97683
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-97683
请登录查看更多情报信息。
Other References for CVE-2026-97683 (1)
Same Patch Batch · IBM · 2026-11-13 · 21 CVEs total
| CVE-2026-91869 | 8.1 HIGH | IBM Security QRadar EDR Improper Restriction of Excessive Authentication Attempts |
| CVE-2026-115788 | 8.1 HIGH | IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands Log |
| CVE-2026-110279 | 8.1 HIGH | IBM ContextForge MCP Gateway is affected by an improper authentication vulnerability |
| CVE-2026-109158 | 7.5 HIGH | IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands Inse |
| CVE-2026-123628 | 7.5 HIGH | IBM webMethods Integration Server is vulnerable to sensitive information disclousure via a |
| CVE-2026-110278 | 7.4 HIGH | IBM ContextForge MCP Gateway is affected by an information exposure vulnerability |
| CVE-2026-91868 | 6.5 MEDIUM | IBM Security QRadar EDR Improper Access Control |
| CVE-2026-94407 | 6.5 MEDIUM | IBM ContextForge MCP Gateway is affected by a regular expression denial of service |
| CVE-2026-110189 | 6.5 MEDIUM | IBM ContextForge MCP Gateway is affected by a denial of service due to an incomplete list |
| CVE-2026-82102 | 6.4 MEDIUM | DataStage on Cloud Pak for Data has vulnerabilities due to open source software |
| CVE-2026-9870 | 6.1 MEDIUM | IBM Cyber Fraud includes components with multiple known vulnerabilities |
| CVE-2026-114468 | 6.0 MEDIUM | IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands Hard |
| CVE-2026-110194 | 5.4 MEDIUM | IBM ContextForge MCP Gateway is affected by a server-side request forgery vulnerability |
| CVE-2026-110195 | 5.4 MEDIUM | IBM ContextForge MCP Gateway is affected by an authorization bypass vulnerability |
| CVE-2026-9821 | 5.3 MEDIUM | IBM Cyber Fraud includes components with multiple known vulnerabilities |
| CVE-2026-115501 | 5.3 MEDIUM | IBM i is Affected By A Buffer Overflow Vulnerability in QFileSvr.400 File System [] |
| CVE-2026-110199 | 4.8 MEDIUM | IBM ContextForge MCP Gateway is affected by a DOM-based cross-site scripting |
| CVE-2026-110178 | 4.1 MEDIUM | IBM ContextForge MCP Gateway is affected by an improper access control vulnerability in co |
| CVE-2026-108290 | 4.0 MEDIUM | IBM Cyber Fraud includes components with multiple known vulnerabilities |
| CVE-2026-5514 | 3.3 LOW | IBM Bob is vulnerable to unauthorized session token exposure due to improper handling of a |
IV. Related Vulnerabilities
Same product: Cyber Fraud
-
CVE-2026-9870
IBM Cyber Fraud includes components with multiple known vuln -
CVE-2026-108290
IBM Cyber Fraud includes components with multiple known vuln -
CVE-2026-9821
IBM Cyber Fraud includes components with multiple known vuln -
CVE-2026-87800
IBM Cyber Fraud includes components with multiple known vuln
Same vendor: IBM
-
CVE-2026-82102
DataStage on Cloud Pak for Data has vulnerabilities due to o -
CVE-2026-91868
IBM Security QRadar EDR Improper Access Control -
CVE-2026-91869
IBM Security QRadar EDR Improper Restriction of Excessive Au -
CVE-2026-109158
IBM App Connect Operator and IBM App Connect Enterprise Cert -
CVE-2026-115788
IBM App Connect Operator and IBM App Connect Enterprise Cert
Same weakness: CWE-693
-
CVE-2026-123638
Gitea protected file pattern bypass with quoted file names -
CVE-2026-122044
Philips Hue Bridge Pro Protection Mechanism Failure Authenti -
CVE-2026-115538
Docker Engine overlay-network encryption rules are not resto -
CVE-2026-18668
Protection Mechanism Failure vulnerability affects IBM Sterl -
CVE-2026-102618
IBM i is Affected by a Protection Mechanism Failure