CVE-2025-36418
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2026-01-20

Last updated on: 2026-01-26

Assigner: IBM Corporation

Description
IBM ApplinX 11.1 is vulnerable due to a privilege escalation vulnerability due to improper verification of JWT tokens. An attacker may be able to craft or modify a JSON web token in order to impersonate another user or to elevate their privileges.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-20
Last Modified
2026-01-26
Generated
2026-06-16
AI Q&A
2026-01-20
EPSS Evaluated
2026-06-15
NVD
CVE-2025-36418
EUVD
EUVD-2026-3365
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
ibm applinx 11.1.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-347 The product does not verify, or incorrectly verifies, the cryptographic signature for data.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability in IBM ApplinX 11.1 is a privilege escalation issue caused by improper verification of JSON Web Tokens (JWT). An attacker can craft or modify a JWT to impersonate another user or elevate their privileges within the system.

Impact Analysis

The vulnerability can allow an attacker to gain unauthorized access by impersonating other users or increasing their privileges, potentially leading to unauthorized actions, data exposure, or system compromise.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-36418. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart