CVE-2026-108290

MediumCVSS 4.0/10Last modified Nov 13, 2026

Description

IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an attacker with local access to a container to extract sensitive information due to unrestrictive network policies.

Metrics

CVSS 3.1 4.0/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-923

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published: Nov 13, 2026
Last modified: Nov 13, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-1082919.8Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from CVE-2026-1082925.5IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to upload a file with dangerous types that could be executed by ano CVE-2026-10834.4The Appointment Hour Booking – Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form field configurati CVE-2026-108308.8The AllCoach WordPress plugin before 1.0.2 does not verify that an email address submitted to a public account-registration endpoint is not CVE-2026-1083016.0Tanium addressed an improper access controls vulnerability in Comply.CVE-2026-1083024.3Tanium addressed an improper access controls vulnerability in Comply.CVE-2026-1083038.8Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.CVE-2026-1083047.8Tanium addressed a local privilege escalation vulnerability in End-User Notifications.CVE-2026-1083057.8Tanium addressed a local privilege escalation vulnerability in End-User Notifications.CVE-2026-1083067.8Tanium addressed a local privilege escalation vulnerability in End-User Notifications.CVE-2026-1083077.8Tanium addressed a heap-based buffer overflow vulnerability in Index.CVE-2026-1083086.5Tanium addressed a SQL injection vulnerability in Patch.