---
id: CVE-2026-3161
title: IBM Cloud Pak System Risky Cryptographic Algorithm
summary: >-
  IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected
  cryptographic algorithms that could allow an attacker to decrypt highly
  sensitive information.
severity: medium
cvss: 5.9
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-327
vendor: IBM
product: Cloud Pak System
affected:
  - cloud_pak_system 2.3.6.0
  - cloud_pak_system 2.3.6.1
published: '2026-10-19'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T17:39:57.551Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-3161'
references:
  - url: 'https://www.ibm.com/support/pages/node/7290183'
tags:
  - cve.org
ingestedAt: '2026-10-19T18:35:50.161Z'
---

## Overview

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

## Affected

- `cloud_pak_system 2.3.6.0`
- `cloud_pak_system 2.3.6.1`

## Remediation

IBM strongly recommends addressing the vulnerability now by  https://www.ibm.com/support/pages/node/7284365 











For unsupported versions the recommendation is  to upgrade to supported version of the product.