{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/tririga-application-platform-5.0.0-through-5.0.8/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:tririga_application_platform:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:tririga_application_platform:5.0.8:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-102627"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["TRIRIGA Application Platform (5.0.0 through 5.0.8)"],"_cs_severities":["high"],"_cs_tags":["remote-code-execution","path-traversal","ibm","tririga"],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM TRIRIGA Application Platform, versions 5.0.0 through 5.0.8, is susceptible to a remote code execution vulnerability identified as CVE-2026-102627. The flaw originates from improper input validation of file paths when the application processes and extracts archive files uploaded by users. A remote authenticated attacker can leverage this vulnerability by uploading a specifically crafted archive containing malicious files with directory traversal sequences. When the platform extracts these files, it may write them to unintended locations on the host file system, enabling the attacker to overwrite legitimate application components or place executable scripts in directories that are processed by the server. This results in the execution of arbitrary code within the context of the application server process, potentially leading to a full system compromise.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a remote authenticated attacker to achieve arbitrary code execution on the server hosting the IBM TRIRIGA Application Platform. This can result in complete system compromise, unauthorized access to sensitive business data, and potential lateral movement within the enterprise network. Organizations utilizing affected versions are at risk of server-side control and data exfiltration.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to a patched version of the IBM TRIRIGA Application Platform immediately upon vendor release.\u003c/li\u003e\n\u003cli\u003eAudit application logs for suspicious archive upload activity, particularly requests involving file paths containing directory traversal patterns such as \u0026quot;../\u0026quot;.\u003c/li\u003e\n\u003cli\u003eRestrict user permissions to minimize the number of authenticated users who can perform file upload or archive extraction operations.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-13T00:31:12Z","date_published":"2026-10-13T00:31:12Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-102627/","summary":"IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 contain a path traversal vulnerability during archive extraction that allows remote authenticated attackers to execute arbitrary code.","title":"Remote Code Execution in IBM TRIRIGA Application Platform","url":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-102627/"}],"language":"en","title":"CraftedSignal Threat Feed - TRIRIGA Application Platform (5.0.0 Through 5.0.8)","version":"https://jsonfeed.org/version/1.1"}