Vulnerability · Published Oct 12, 2026 · Assigned by ibm

CVE-2026-93892Security Vulnerability identified in IBM TRIRIGA - Information Disclosure in Admin Console

High 8.1

In plain English

A high-severity information exposure in TRIRIGA Application Platform from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).

Severity (CVSS 3.1)8.1High

Exploit odds (30 days)0.3%top 79.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.

Affected products (as reported)

Vendor	Product	Versions
IBM	TRIRIGA Application Platform	5.0.0 – through 5.0.8

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References

https://www.ibm.com/support/pages/node/7292035 vendor-advisory, patch