Cryptographic Weakness in IBM Cloud Pak System Products
CVE-2026-3161

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Cloud Pak System
Vendor
CVE Published:
19 October 2026

What is CVE-2026-3161?

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 are impacted by vulnerabilities stemming from the use of inadequate cryptographic algorithms. This flaw presents an avenue for attackers to decrypt sensitive information, potentially exposing critical data related to organizational operations and user privacy. It is crucial for businesses using these versions to apply the necessary patches and enhance their security posture.

Affected Version(s)

Cloud Pak System 2.3.6.0

Cloud Pak System 2.3.6.1

References

https://www.ibm.com/support/pages/node/7290183
vendor-advisorypatch

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.