CVE-2025-36178

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow an authenticated user to bypass input validation due to improper validation of client-side input of file size.

  • Published Sep 18, 2026
  • CVSS 5.4 medium
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2025-36178 at the National Vulnerability Database