CVE-2026-93891

Received Received - Intake

XXE Injection Vulnerability in IBM TRIRIGA Application Platform

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: IBM Corporation

Description

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-12

Generated

2026-10-13

AI Q&A

2026-10-13

EPSS Evaluated

N/A

NVD

CVE-2026-93891

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	TRIRIGA	Application Platform 5.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-611	The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

Attack-Flow Graph

Executive Summary

This vulnerability is an XML External Entity (XXE) injection flaw in IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8. It allows a remote authenticated attacker to access sensitive information by exploiting improper handling of XML input.

Impact Analysis

An attacker could exploit this to read files on the server, access internal systems, or perform denial-of-service attacks. This may lead to data breaches, unauthorized access to confidential information, or disruption of services.

Compliance Impact

This vulnerability could violate GDPR by exposing personal data and HIPAA by leaking protected health information. Organizations may face fines, legal penalties, and reputational damage due to non-compliance with data protection requirements.

Mitigation Strategies

Apply the latest IBM TRIRIGA Application Platform patch or update to version 5.0.9 or later to address the XXE injection flaw.

Hi! I’m here to help you understand CVE-2026-93891. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70