CVE-2025-36251: IBM Aix

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56347.

Affected products

• IBM Aix: version 7.2 only; version 7.3 only
• IBM Vios: version 3.1.0 only; version 4.1.0 only

Published 2025-11-13. Last modified 2026-06-17.