Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)

Summary DS8900F and DS8A00 updates have been released to remediate vulnerabilities in various components like IBM Java Quarterly Update, IBM WebSphere Application Server, IBM Power HMC, Linux Kernel, OpenSSL, libsoup, libssh, OpenSSH, net-snmp, Apache HTTP Server httpd, Expat libexpat, libpng,...

CVE-2025-36255

creationtimestamp| type| source ---|---|--- 2026-08-20 01:46:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mti4sbfqc42j 2026-08-20 20:43:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117129778872954937...

CVE-2025-36255

CVE-2025-36255 affects IBM System Storage DS8A00 (versions 10.1.3.0 through 10.11.35.0) and IBM DS8900F (versions 89.40.83.0 through 89.44.25.0). An authenticated user with low privileges can create a new user assigned privileged roles, due to improper privileged defined with unsafe actions . Thi...