PT-2026-147203

CVE-2026-9821

·

Published

2026-11-13

·

Updated

2026-11-13

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-117: Improper Output Neutralization for Logs
Related identifiers
CVE-2026-9821
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com