CVE-2025-36440

Published: Mar 25, 2026 Last Modified: Mar 25, 2026

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 5,1

Source: [email protected]

Attack Vector: local

Attack Complexity: low

Privileges Required: none

User Interaction: none

Scope: unchanged

Confidentiality: low

Integrity: low

Availability: none

AI Translation Available

IBM Concert 1.0.0 through 2.2.0 could allow a local user to obtain sensitive information due to missing function level access control.

522

Incomplete

Abstraction: Class Structure: Simple

Security Scopes Affected:

Access Control

Potential Impacts:

Gain Privileges Or Assume Identity

Technologies: ICS/OT, Not Technology-Specific, Web Based