Medium severity · published Jul 23, 2025
CVE-2025-36116
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 GUI is affected by cross-site WebSocket hijacking vulnerability
6.3
CVSS
0.2%
EPSS
No
On KEV
Description
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 GUI is affected by cross-site WebSocket hijacking vulnerability. By sending a specially crafted request, an unauthenticated malicious actor could exploit this vulnerability to sniff an existing WebSocket connection to then remotely perform operations that the user is not allowed to perform.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DM
Db2 Mirror For I · Ibm
7.4; 7.5; 7.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-36116
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-36116
Vendor Advisory
https://www.ibm.com/support/pages/node/7240351
More from Db2 Mirror For I
9.9
CVE-2026-96012
IBM Db2 Mirror for i Privilege Escalation
9.8
CVE-2026-17186
IBM Db2 Mirror for i is affected by multiple vulnerabilities
9.8
CVE-2026-17184
IBM Db2 Mirror for i is affected by multiple vulnerabilities
9.8
CVE-2026-17182
IBM Db2 Mirror for i is affected by multiple vulnerabilities
9.8
CVE-2026-16956
IBM Db2 Mirror for i is vulnerable to OS command injection []