ZeroDay Findings
Sign inSign up

Findings

CVE-2025-36421

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using…

Published Sep 18, 2026 · updated Oct 14, 2026

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 18, 2026 · NIST NVD

    Detected

    IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.

  2. Oct 14, 2026 · NIST NVD

    Updated

    IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.

Sources

  • CVE.orgCVE-2025-36421

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2025-36421

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDCVE-2025-36421

    IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.

    nvd.nist.gov

References