VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 17, 2026· Updated Feb 18, 2026

IBM Security QRadar EDR Software has multiple vulnerabilities

CVE-2025-36377

Description

IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system.

Affected products

2
  • IBM/Security QRadar EDRv5
    cpe:2.3:a:ibm:security_qradar_edr:3.12:*:*:*:*:*:*:*
    Range: 3.12
  • IBM/Qradar Network Securityllm-fuzzy
    Range: >=3.12, <=3.12.23

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.