Skip to content
Sign in
9.6 Critical

CVE-2025-36251 IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to…

Description

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56347.

Affected products and versions

Product Affected versions Fixed in
AIX 7.3 No fix stated
AIX 7.2 No fix stated
VIOS 4.1 No fix stated
VIOS 3.1 No fix stated

Other CVEs of AIX

The 213 CVEs of AIX →
CVE-2026-16821 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format… 7.0 High CVE-2026-19783 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to… 6.7 Medium CVE-2026-19449 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow an unprivileged local user to… 8.8 High CVE-2026-19448 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP… 6.5 Medium
Track this CVE