Medium severity · published Sep 18, 2026
CVE-2025-33141
IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QR
QRadar · IBM
7.5.0 through 7.5.0 UP15 Interim Fix 006 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-33141
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-33141
www.ibm.com
https://www.ibm.com/support/pages/node/7286014
More from QRadar
9.8
CVE-2026-10025
IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability
8.8
CVE-2026-13477
IBM QRadar SIEM is vulnerable to remote code execution by privileged users
8.8
CVE-2024-56462
IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
6.7
CVE-2026-5522
QRadar contains hard-coded credentials