CVE-2025-36007CWE-266

CVE-2025-36007

High ยท published October 27, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
2.0
In the wild
Unconfirmed
What it is

โšก A sneaky privilege escalation exists in IBM QRadar SIEM that could let unauthorized users level up their access like a video game cheat code! ๐ŸŽฎ Think of this vulnerability like giving a hotel room key to someone without checking their ID โ€” it opens the door to areas they shouldn't be allowed to enter, potentially leading to catastrophic breaches of sensitive information. An attacker exploiting this vulnerability could gain unauthorized access to critical system functions and sensitive data, leading to potential data leaks or further exploitation. This could be an absolute nightmare for security teams, as it undermines the integrity and trustworthiness of your SIEM solution.

Put simply

Think of this vulnerability like giving a hotel room key to someone without checking their ID โ€” it opens the door to areas they shouldn't be allowed to enter, potentially leading to catastrophic breaches of sensitive information. The vulnerability arises from improper privilege assignment in an update script within IBM QRadar SIEM versions 7.5 through 7.5.0 Update Pack 13 Independent Fix 02, allowing unauthorized users to execute actions with elevated privileges.

What to do

An attacker exploiting this vulnerability could gain unauthorized access to critical system functions and sensitive data, leading to potential data leaks or further exploitation. This could be an absolute nightmare for security teams, as it undermines the integrity and trustworthiness of your SIEM solution. To remediate this, immediately patch your QRadar SIEM to the latest version that addresses this vulnerability. Regularly audit your user privileges and update any internal policies regarding access control to prevent future occurrences. Stay vigilant and proactive! You've got this โ€” secure your system and keep the cyber villains at bay! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS v3.1
7.8 ยท HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00125 ยท 2.0th percentile
Weakness
CWE-266 ยท Incorrect Privilege Assignment
Published
2025-10-27T23:16Z
Affected products (16)
ProductVersionsFixed in
ibm/qradar_security_information_and_event_managerall versionsโ€”
ibm/qradar_security_information_and_event_managerall versionsโ€”
ibm/qradar_security_information_and_event_managerall versionsโ€”
ibm/qradar_security_information_and_event_managerall versionsโ€”
ibm/qradar_security_information_and_event_managerall versionsโ€”
ibm/qradar_security_information_and_event_managerall versionsโ€”
ibm/qradar_security_information_and_event_managerall versionsโ€”
ibm/qradar_security_information_and_event_managerall versionsโ€”
ibm/qradar_security_information_and_event_managerall versionsโ€”
ibm/qradar_security_information_and_event_managerall versionsโ€”
ibm/qradar_security_information_and_event_managerall versionsโ€”
ibm/qradar_security_information_and_event_managerall versionsโ€”
ibm/qradar_security_information_and_event_managerall versionsโ€”
ibm/qradar_security_information_and_event_managerall versionsโ€”
ibm/qradar_security_information_and_event_managerall versionsโ€”
ibm/qradar_security_information_and_event_managerall versionsโ€”
References (1)
EPSS history
Timeline
  • 27 OCT 18:40Z
    IBM QRadar SIEM incorrect privilege assignment
    cvelistv5