CVE-2025-36119: IBM I

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM i 7.3, 7.4, 7.5, and 7.6 is affected by an authenticated user obtaining elevated privileges with IBM Digital Certificate Manager for i (DCM) due to a web session hijacking vulnerability. An authenticated user without administrator privileges could exploit this vulnerability to perform actions in DCM as an administrator.

Affected products

• IBM I: version 7.3 only; version 7.4 only; version 7.5 only; version 7.6 only

Published 2025-08-08. Last modified 2026-06-17.