Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56346.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 2 products
https://www.ibm.com/support/pages/security-bulletin-aix-vulnerable-arbitrary-command-execution-cve-2025-36251-cve-2025-36250-insufficiently-protected-credentials-cve-2025-36096-and-path-traversal-cve-2025-36236
Post summary
IBM’s AIX security bulletin discloses four new CVEs, details their vulnerability types, and provides patch or mitigation information, without mentioning exploits, PoCs, or active exploitation.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | ibm | aix | 7.2 | - | - |
| OS | ibm | aix | 7.3 | - | - |
| App | ibm | vios | 3.1.0 | - | - |
| App | ibm | vios | 4.1.0 | - | - |