CVE-2026-3161Medium· 5.9▾ SunlitIBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
cloud_pak_system 2.3.6.0cloud_pak_system 2.3.6.1IBM strongly recommends addressing the vulnerability now by https://www.ibm.com/support/pages/node/7284365
For unsupported versions the recommendation is to upgrade to supported version of the product.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-38375Medium· 6.1IBM Cloud Pak System Cross-Site Scripting
CVE-2026-4418Medium· 5.4IBM Cloud Pak System HTML Injection
CVE-2026-3295High· 7.4IBM Cloud Pak System Cross-Site Scripting
CVE-2026-6930Low· 3.7IBM Concert Software Risky Cryptographic Algorithm
CVE-2026-18104Low· 3.3IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook (ECB) mode for encryption.
CVE-2026-18153Medium· 5.4IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information and forge authentication tags due to the use of hard-coded cryptographic keys and initialization vec…