CVE-2025-36014 HIGH

CVE-2025-36014: IBM Integration Bus for z/OS code injection

Vendor Ibm
Product Integration Bus
Weakness CWE-94 · Code injection
Published July 7, 2025
Last update February 26, 2026
View on NVD All CVEs

CVSS base score

8.2/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.5 is vulnerable to code injection by a privileged user with access to the IIB install directory.

Key dates

02Disclosure timeline

July 7, 2025 CVE published
February 26, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-15130 shanyu SyCms Administrative Panel FileManageController.class.php addPost code injection CVE-2025-5120 Sandbox Escape Vulnerability in huggingface/smolagents CVE-2024-9061 WP Popup Builder – Popup Forms and Marketing Lead Generation <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via wp_ajax_nopriv_shortcode_Api_Add CVE-2025-47988 Azure Monitor Agent Remote Code Execution Vulnerability CVE-2026-2582 Germanized for WooCommerce <= 3.20.5 - Unauthenticated Arbitrary Shortcode Execution