High · 8.8 CVE-2026-102627 EUVD-2026-98083GHSA-wpmj-w22r-f3v3

Security Vulnerability identified in IBM TRIRIGA - Zip Slip

Published Oct 12, 2026 · Updated Oct 13, 2026 · Assigned by ibm

Vendor: IBM Product: TRIRIGA Application Platform

Description

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction.

Affected products

Vendor	Product	Affected	Fixed
IBM	TRIRIGA Application Platform	5.0.0 – ≤ 5.0.8	—

References

https://www.ibm.com/support/pages/node/7292037 vendor-advisory patch