CVE-2025-36118

HIGH 7.5CVE-2025-36118 · Published 17/11/2025 · updated 07/10/2026

In short

CVE-2025-36118 is a HIGH (CVSS 7.5) vulnerability affecting storage virtualize (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 32.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
storage virtualize ibm	`= 8.4.0.0= 8.5.0.0= 8.7.0.0= 9.1.0.0`	No fix yet

Description

IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request.

References

ibm.com/support/pages/node/7250954 · Vendor Advisory

More vulnerabilities in storage virtualize

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

storage virtualize

ibm

= 8.4.0.0= 8.5.0.0= 8.7.0.0= 9.1.0.0

No fix yet

More vulnerabilities in storage virtualize

See all →