High · 7.6 CVE-2026-93891 EUVD-2026-98085GHSA-vjfm-g58v-2m88

Security Vulnerability identified in IBM TRIRIGA - XXE

Published Oct 12, 2026 · Updated Oct 13, 2026 · Assigned by ibm

Vendor: IBM Product: TRIRIGA Application Platform

Description

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.

Affected products

Vendor	Product	Affected	Fixed
IBM	TRIRIGA Application Platform	5.0.0 – ≤ 5.0.8	—

References

https://www.ibm.com/support/pages/node/7292036 vendor-advisory patch