CVE-2025-33108: IBM Backup, Recovery and Media Services for i 7.4 and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges…

PriorityP355high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

0.55%

41.9th percentile

IBM Backup, Recovery and Media Services for i 7.4 and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to a library unqualified call made by a BRMS program. A malicious actor could cause user-controlled code to run with component access to the host operating system.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	backup_recovery_and_media_services_for_i	—	—
ibm	backup_recovery_and_media_services_for_i	—	—
ibm	i	—	—
ibm	i	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.