Is CVE-2026-9825 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-9825?

CVE-2026-9825 has a CVSS v3 severity of LOW (3.7).

Back

CVE-2026-9825

Description

IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.