CVE-2025-36582 Weak cryptography in NetWorker

What is CVE-2025-36582?

CVE-2025-36582 is a medium-severity vulnerability in Dell NetWorker, published on 1 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

Weakness: CWE-757

Which versions are affected by CVE-2025-36582?

It affects 1 product.

Products include Dell Networker.

How do I fix CVE-2025-36582?

No fix has been published for CVE-2025-36582 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-36582 being exploited?

There is no known exploitation of CVE-2025-36582 in the wild and no public exploit code.

Other vulnerabilities in Dell NetWorker

• CVE-2023-28055 Missing authorization in NetWorker High 8.8
• CVE-2023-25539 Command injection in NetWorker NVE High 8.4
• CVE-2024-42422 Auth bypass in NetWorker High 8.3
• CVE-2025-21103 Code injection in NetWorker Management Console High 7.8
• CVE-2025-21107 Privilege escalation in NetWorker High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6v9v-h9v4-6xm8.