CVE-2025-36096

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques.

Scoring

Severity

CRITICAL

CVSS base score

9

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS probability

0.30%

CWE

CWE-522

Published

2025-11-13

Last modified

2026-03-13

Affected products

• IBM AIX
• IBM AIX
• IBM VIOS
• IBM VIOS

Weakness type

• CWE-522

Related vulnerabilities

• CVE-2026-69805 — .NET Elevation of Privilege Vulnerability
• CVE-2026-64918 — Microsoft Office Spoofing Vulnerability
• CVE-2026-81381 — GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
• CVE-2026-77909 — Azure CycleCloud Information Disclosure Vulnerability
• CVE-2026-82070 — Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface
• CVE-2026-86600 — Workload identity attestation generated before login host validation in Snowflake drivers
• CVE-2026-86726 — AVideo through 29.0 Information Disclosure via restreamsActive.json.php
• CVE-2026-61516 — Netis NX10 Credential Disclosure via sysinfo Diagnostic Endpoint

Markdown version · Browse all CVEs