CVE-2025-36075
IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00
CVSS
5.3
Medio
EPSS
0.2%
p16
KEV
—
Exploit Today
5
0-100
Publicado: 8 nov 2026 · Última mod.: 9 nov 2026 · CWE-1287
Sin historial EPSS suficiente todavía.
IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allow an authenticated user to obtain sensitive information, caused by improper user input validation. By using a set of API requests the user could exploit this vulnerability to decrypt sensitive information.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-632826.5 MED—
———Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which could lead to privilege escalation.6hCVE-2026-145433.9 BAJ—
———The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access to protected system resources. This flaw can only be exploited after authenticating with an admin-privileged service account.6hCVE-2026-145426.7 MED—
———The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege
escalation. This flaw can only be exploited after authenticating with an admin-privileged service
account.6hCVE-2026-133129.9 CRÍ—
———A vulnerability that could allow an attacker to compromise a system.6hCVE-2026-7696410.0 CRÍ—
———SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation could allow the attacker to execute arbitrary code and fully compromise the system, resulting in a high impact on confidentiality, integrity and availability of the system.11hCVE-2026-123776—15.2%
——5RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting "tz" to tzset(), , so a FIFO or device path blocks the CGI process.
The normalize_params method sends any query key matching /tz/i to tz(), which sets $ENV{TZ} to that value, with no validation. It then calls tzset(). glibc treats a TZ value starting with / or : as a file path and opens it, so a value naming a FIFO or a blocking device stalls the process inside tzset().3d