CVE-2025-36418

published 2026-01-20

CVE-2025-36418: IBM ApplinX 11.1 is vulnerable due to a privilege escalation vulnerability due to improper verification of JWT tokens. An attacker may be able to craft or…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

IBM ApplinX 11.1 is vulnerable due to a privilege escalation vulnerability due to improper verification of JWT tokens. An attacker may be able to craft or modify a JSON web token in order to impersonate another user or to elevate their privileges.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	applinx	—	—
ibm	applinx	—	—

CWE-347