IBM Qradar Edr vulnerabilities

2 CVEs affecting IBM Qradar Edr, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-36379, published 2026-02-17.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-36377, published 2026-02-17. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system.
• CVE-2025-36379, published 2026-02-17. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Security QRadar EDR 3.12 through 3.12.23 IBM Security ReaQta uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.