Data Exposure Vulnerability in IBM Cognos Analytics Mobile for iOS

CVE-2025-36106

What is CVE-2025-36106?

IBM Cognos Analytics Mobile for iOS contains a vulnerability that enables malicious actors to intercept and manipulate data transmitted to and from the application. This exploitation is facilitated by the presence of a deprecated or misconfigured AFNetworking library during runtime. Such a breach could provide an attacker with unauthorized access to sensitive information stored on the device or accessible over the network, posing significant risks to user privacy and data integrity.

References