{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aibmtririga_application_platform/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:tririga_application_platform:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-110273"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=CVE-2026-110273\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":["TRIRIGA Application Platform (5.0.0 through 5.0.9)"],"_cs_severities":["high"],"_cs_tags":["ibm","rce","vulnerability"],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM TRIRIGA Application Platform versions 5.0.0 through 5.0.9 are susceptible to a command injection vulnerability (CVE-2026-110273). The issue arises from the improper neutralization of special elements used in OS commands. A remote authenticated attacker can leverage this flaw to execute arbitrary code on the underlying host operating system. IBM has not yet disclosed a fixed version or specific remediation steps in the NVD bulletin.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a remote authenticated attacker to gain arbitrary code execution, potentially leading to full system compromise of the application host.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all instances of IBM TRIRIGA Application Platform within the environment.\u003c/li\u003e\n\u003cli\u003eMonitor administrative and application-level access logs for anomalous authenticated sessions or unusual system command execution patterns stemming from the TRIRIGA service account.\u003c/li\u003e\n\u003cli\u003eReview official IBM security advisories for the release of patches addressing CVE-2026-110273 and apply them immediately upon availability.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-08T20:56:57Z","date_published":"2026-11-08T19:34:43Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-tririga-rce/","summary":"IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.9 contain a vulnerability allowing remote authenticated attackers to execute arbitrary code via command injection.","title":"IBM TRIRIGA Application Platform: Remote code execution (CVE-2026-110273)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-tririga-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:ibm:tririga_application_platform:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}