Skip to content
Sign in
7.1 High

CVE-2025-36119 IBM i 7.3, 7.4, 7.5, and 7.6 is affected by an authenticated user obtaining elevated privileges with IBM Digital…

Description

IBM i 7.3, 7.4, 7.5, and 7.6 is affected by an authenticated user obtaining elevated privileges with IBM Digital Certificate Manager for i (DCM) due to a web session hijacking vulnerability. An authenticated user without administrator privileges could exploit this vulnerability to perform actions in DCM as an administrator.

Affected products and versions

Product Affected versions Fixed in
i 7.6 No fix stated
i 7.5 No fix stated
i 7.4 No fix stated
i 7.3 No fix stated

Other CVEs of i

The 215 CVEs of i →
CVE-2026-102618 IBM i is Affected by a Protection Mechanism Failure 3.6 Low CVE-2026-93744 IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to… 6.5 Medium CVE-2026-17068 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement… 5.4 Medium CVE-2026-17073 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree… 5.4 Medium
Track this CVE