CVE-2025-36074CWE-434unrestricted-file-upload

CVE-2025-36074

Medium · published April 23, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
26.1
In the wild
Unconfirmed
What it is

IBM Security Verify Directory (Container) 10.0.0 through 10.0.0.3 IBM Security Verify Directory could be vulnerable to malicious file upload by not validating file type. A privileged user could upload malicious files into the system that can be sent to victims for performing further attacks against the system.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00340 · 26.1th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-04-23T04:16Z
Affected products (1)
ProductVersionsFixed in
ibm/security_verify_directory≥ 10.0.0, ≤ 10.0.3—
References (1)
EPSS history
Timeline
  • 22 APR 23:39Z
    Security vulnerability has been detected in IBM Security Verify Directory
    cvelistv5