IBM DS8A00 Firmware vulnerabilities

4 CVEs affecting IBM DS8A00 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-36398, published 2026-08-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-36254, published 2026-08-19. High severity, CVSS 7.4. EPSS: 0.5% chance of exploitation in the next 30 days. IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improperly encoding of DSCLI…
CVE-2025-36398, published 2026-08-19. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's command history due to an…
CVE-2025-36255, published 2026-08-19. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles due to improper…
CVE-2025-36192, published 2025-12-26. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. IBM DS8A00( R10.1) 10.10.106.0 and IBM DS8A00 ( R10.0) 10.1.3.010.2.45.0 and IBM DS8900F ( R9.4) 89.40.83.089.42.18.089.44.5.0 IBM System Storage DS8000 could allow a local user with authorized CCW…