CVE-2025-36238
Medium · 6.0CVSS
6.0
EPSS
0.2%
Published
Feb 2, 2026
CISA due date
—
The record
IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 could allow a local user with administration privileges to obtain sensitive information from a Virtual TPM through a series of PowerVM service procedures.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-76968 SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an… CWE-497
- CVE-2026-80119 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and… CWE-497
- CVE-2026-80118 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and… CWE-497
- CVE-2026-66840 XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized… CWE-497
- CVE-2026-67267 Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive… CWE-497
- CVE-2026-74007 Unauthenticated Sensitive Data Exposure in 3D FlipBook – PDF Flipbook Viewer, Flipbook… CWE-497
- CVE-2026-32468 Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions. CWE-497
- CVE-2026-66462 Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 versions. CWE-497