CVE-2025-36096

critical · 9

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques.

CVSS

0.3%

EPSS (exploit prob.)

23rd

EPSS percentile

2025-11-13

Published

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-522

Affected products

Vendor	Product	Affected versions
ibm	vios	3.1.0
ibm	vios	4.1.0
ibm	aix	7.2
ibm	aix	7.3

Check a specific version with /api/v1/cve/match.

References

https://www.ibm.com/support/pages/node/7251173

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-36096