VULNERABILITY INTELLIGENCE

CVE-2025-36116

CVSS score6.3 MEDIUM

EPSS probability0.18%

CISA KEVNot currently listed

Published2025-07-23

Last modified2026-06-17

Description

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 GUI is affected by cross-site WebSocket hijacking vulnerability. By sending a specially crafted request, an unauthenticated malicious actor could exploit this vulnerability to sniff an existing WebSocket connection to then remotely perform operations that the user is not allowed to perform.