CVE-2025-36096 AIX Insufficiently Protected Credentials

Critical 9.0 Published 13 Nov 2025 Updated 26 Feb 2026

Attackers can steal NIM private keys from IBM AIX and VIOS systems via man-in-the-middle attacks, compromising network installation security.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-36096?

CVE-2025-36096 is a critical vulnerability in Ibm Aix, published on 13 Nov 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques.

Weakness: CWE-522

Which versions are affected by CVE-2025-36096?

It affects 2 products.

Products include Ibm Aix, Ibm Vios.

How do I fix CVE-2025-36096?

No fix has been published for CVE-2025-36096 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-36096 being exploited?

There is no known exploitation of CVE-2025-36096 in the wild and no public exploit code.

All Ibm Aix vulnerabilities

Sources

Also known as GHSA-gcw9-j843-4vfx.