AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

IBMCVE-2025-36061

IBM Storage TS4500 Library: denial of service

IBM

CVE-2025-36061 · Published Oct 19, 2026 · updated Oct 28, 2026

Medium6.5
No fix yet
IBM advisory

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources.

Affected versions

PackageAffectedFixed in
Storage TS4500 Library
Product
>= 1.1.1.6, <= 1.12.0.3No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-770

More IBM advisories

All IBM
Critical 10.0Oct 20IBM DataStage on Cloud Pak for Data: improper authorizationCVE-2026-81212no fix yetMedium 5.5Oct 19IBM Storage TS4500 Library: insufficient session expirationCVE-2025-36069no fix yetMedium 6.3Oct 19IBM Storage TS4500 Library: insufficient session expirationCVE-2025-36252no fix yetHigh 7.4Oct 1IBM confluent-kafka: information disclosureCVE-2026-15911no fix yetHigh 8.1Sep 29IBM Guardium Data Protection: path traversalCVE-2026-84842no fix yetHigh 7.8Sep 29IBM i: insecure permissionsCVE-2026-84414no fix yet