CVE-2025-36192: IBM DS8900F Firmware

High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days.

IBM DS8A00( R10.1) 10.10.106.0 and IBM DS8A00 ( R10.0) 10.1.3.010.2.45.0 and IBM DS8900F ( R9.4) 89.40.83.089.42.18.089.44.5.0 IBM System Storage DS8000 could allow a local user with authorized CCW update permissions to delete or corrupt backups due to missing authorization in IBM Safeguarded Copy / GDPS Logical corruption protection mechanisms.

Affected products

• IBM DS8900F Firmware: version 89.40.83.0 only; version 89.42.18.0 only; version 89.44.5.0 only
• IBM DS8A00 Firmware: version 10.1.3.0 only; version 10.2.45.0 only; version 10.10.106.0 only

Published 2025-12-26. Last modified 2026-10-07.