PT-2026-3631 · Ibm · Ibm Applinx

CVE-2025-36418 · Published 2026-01-20 · Updated 2026-01-20

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM ApplinX version 11.1

Description IBM ApplinX version 11.1 contains a privilege escalation issue stemming from inadequate verification of JSON Web Tokens (JWT). An attacker could potentially create or alter a JWT to assume the identity of another user or gain elevated privileges. The JWT tokens are not properly validated, allowing for manipulation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2025-36418

Affected Products

Ibm Applinx

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-36418 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36418 · Vendor Advisory
• https://twitter.com/CVEnew/status/2013650048597266711 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2013728758746775908 · Twitter Post
• https://ibm.com/support/pages/node/7257446 · Patch, Vendor Advisory