CVE-2025-36411

Low · 3.5

CVSS

3.5

EPSS

0.1%

Published

Jan 20, 2026

CISA due date

—

The record

IBM ApplinX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Affected packages

Ecosystem	Package	Introduced	Fixed