CVE-2025-36254

7.4 highEPSS 0.5%

High (7.4) in ibm. EPSS 0.5% chance of exploitation in the next 30 days.

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improperly encoding of DSCLI command output to obtain sensitive information or cause a denial of service.

Severity

CVSS 3.1

7.4 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE: CWE-116
Published: 2026-08-19
Modified: 2026-09-29
Record from: the NVD, synced 2026-10-19

Affected

ibm:ds8900f_firmware
ibm:ds8a00_firmware

References

https://www.ibm.com/support/pages/node/7284322

Check your stack JSON