CVE-2025-36007 HIGH

CVE-2025-36007: IBM QRadar SIEM incorrect privilege assignment

Vendor Ibm
Product QRadar SIEM
Weakness CWE-266
Published October 27, 2025
Last update February 26, 2026
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an update script.

Key dates

02Disclosure timeline

October 27, 2025 CVE published
February 26, 2026 Record updated