CVE-2026-9825
LOW
NVD
CVSS Score
3.7
Severity
LOW
Published
Oct 20, 2026
Vendor
unknown
Description
IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.