CVE-2025-36410

Medium · 4.3

CVSS

4.3

EPSS

0.2%

Published

Jan 20, 2026

CISA due date

—

The record

IBM ApplinX 11.1 could allow an authenticated user to perform unauthorized administrative actions on the server due to server-side enforcement of client-side security.

Affected packages

Ecosystem	Package	Introduced	Fixed