PT-2026-5875 · Ibm · Ibm Common Cryptographic Architecture

Published 2026-02-04 · Updated 2026-02-07 · CVE-2025-13375

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Common Cryptographic Architecture (CCA) versions 7.5.52 and 8.4.82

Description The software contains a flaw that could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system. This impacts systems running IBM Hardware Security Modules (HSMs). Multiple reports indicate this is a critical issue.

Recommendations IBM Common Cryptographic Architecture version 7.5.52: At the moment, there is no information about a newer version that contains a fix for this vulnerability. IBM Common Cryptographic Architecture version 8.4.82: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2025-13375

Affected Products

Ibm Common Cryptographic Architecture

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2025-13375 · Security Note
• https://twitter.com/xplain_it_again/status/2019951708143591811 · Twitter Post
• https://twitter.com/Karma_X_Inc/status/2020169839554224420 · Twitter Post
• https://twitter.com/CrowdCyber_Com/status/2019966690541314422 · Twitter Post
• https://twitter.com/CVEnew/status/2019182769847652623 · Twitter Post
• https://twitter.com/CveFindCom/status/2019504144327815254 · Twitter Post
• https://ibm.com/support/pages/node/7259625 · Patch, Vendor Advisory
• https://twitter.com/0dayPublishing/status/2019153118932476330 · Twitter Post
• https://twitter.com/transilienceai/status/2019977095108309073 · Twitter Post
• https://t.me/CVEtracker/43765 · Telegram Post
• https://t.me/pentestingnews/72937 · Telegram Post
• https://twitter.com/vuldb/status/2019303872561590342 · Twitter Post
• https://twitter.com/transilienceai/status/2019977150137528568 · Twitter Post