CVE-2025-36250: IBM Aix

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls.  This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56346.

Affected products

• IBM Aix: version 7.2 only; version 7.3 only
• IBM Vios: version 3.1.0 only; version 4.1.0 only

Published 2025-11-13. Last modified 2026-06-17.