CVE-2025-36398

5.4 mediumEPSS 0.3%

Medium (5.4) in ibm. EPSS 0.3% chance of exploitation in the next 30 days.

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's command history due to an externally controlled filename.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE: CWE-73
Published: 2026-08-19
Modified: 2026-09-29
Record from: the NVD, synced 2026-10-19

Affected

ibm:ds8900f_firmware
ibm:ds8a00_firmware

References

https://www.ibm.com/support/pages/node/7284322

Check your stack JSON