CVE-2026-18525 - Vulnerability Details - OpenCVE

IBM Secure Proxy 6.1.0.0 through 6.2.1.2 could allow a remote authenticated attacker to cause a denial of service due to improper validation of listener IP address and port.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Ibm	Secure Proxy

No data.

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7289712

History

Tue, 10 Nov 2026 21:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sun, 08 Nov 2026 18:00:00 +0000

Type	Values Removed	Values Added
Description		IBM Secure Proxy 6.1.0.0 through 6.2.1.2 could allow a remote authenticated attacker to cause a denial of service due to improper validation of listener IP address and port.
Title		IBM Sterling Secure Proxy is vulnerable to multiple issues
First Time appeared		Ibm Ibm secure Proxy
Weaknesses		CWE-20
CPEs		cpe:2.3:a:ibm:secure_proxy:6.1.0.0:::::::* cpe:2.3:a:ibm:secure_proxy:6.1.0.4:::::::* cpe:2.3:a:ibm:secure_proxy:6.2.0.0:::::::* cpe:2.3:a:ibm:secure_proxy:6.2.1.2:::::::*
Vendors & Products		Ibm Ibm secure Proxy
References		https://www.ibm.com/support/pages/node/7289712
Metrics		cvssV3_1 `{'score': 4.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2026-11-08T17:56:42.206Z

Updated: 2026-11-09T19:28:57.170Z

Reserved: 2026-07-31T19:39:30.937Z

Link: CVE-2026-18525

Vulnrichment

Updated: 2026-11-09T19:28:53.645Z

NVD

Status : Awaiting Analysis

Published: 2026-11-08T18:17:04.160

Modified: 2026-11-09T20:18:14.473

Link: CVE-2026-18525

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-18525", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-07-31T19:39:30.937Z", "datePublished": "2026-11-08T17:56:42.206Z", "dateUpdated": "2026-11-09T19:28:57.170Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-11-08T17:56:42.206Z"}, "title": "IBM Sterling Secure Proxy is vulnerable to multiple issues", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Secure Proxy", "versions": [{"status": "affected", "version": "6.1.0.0", "lessThanOrEqual": "6.1.0.4", "versionType": "semver"}, {"status": "affected", "version": "6.2.0.0", "lessThanOrEqual": "6.2.1.2", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:secure_proxy:6.1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:secure_proxy:6.2.1.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:secure_proxy:6.1.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:secure_proxy:6.2.0.0:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Secure Proxy 6.1.0.0 through 6.2.1.2 could allow a remote authenticated attacker to cause a denial of service due to improper validation of listener IP address and port.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Secure Proxy 6.1.0.0 through 6.2.1.2 could allow a remote authenticated attacker to cause a denial of service due to improper validation of listener IP address and port.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7289712", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 4.9, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"}}], "solutions": [{"lang": "en", "value": "ProductAffected Version(s)Fixed-in Version(s)RemediationIBM Sterling Secure Proxy6.1.0.0 - 6.1.0.46.1.0.5 Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes IBM Sterling Secure Proxy6.2.0.0 - 6.2.1.26.2.1.3 Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes \n\n\n\n\n\n\n\nIBM strongly advises upgrading as soon as possible.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p></p><div><table><tbody><tr><td>Product</td><td>Affected Version(s)</td><td>Fixed-in Version(s)</td><td>Remediation</td></tr><tr><td>IBM Sterling Secure Proxy</td><td>6.1.0.0 - 6.1.0.4</td><td>6.1.0.5</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software&product=ibm/Other+software/Sterling+Secure+Proxy&release=6.1.0.5&platform=All&function=all\" rel=\"nofollow\">Fix Central</a></td></tr><tr><td>IBM Sterling Secure Proxy</td><td>6.2.0.0 - 6.2.1.2</td><td>6.2.1.3</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software&product=ibm/Other+software/Sterling+Secure+Proxy&release=6.2.1.3&platform=All&function=all\" rel=\"nofollow\">Fix Central</a></td></tr></tbody></table></div><p></p><p>IBM strongly advises upgrading as soon as possible.</p>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-09T19:28:48.695684Z", "id": "CVE-2026-18525", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T19:28:57.170Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-18525", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-09T19:28:48.695684Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T19:28:53.645Z"}}], "cna": {"title": "IBM Sterling Secure Proxy is vulnerable to multiple issues", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:secure_proxy:6.1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:secure_proxy:6.2.1.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:secure_proxy:6.1.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:secure_proxy:6.2.0.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Secure Proxy", "versions": [{"status": "affected", "version": "6.1.0.0", "versionType": "semver", "lessThanOrEqual": "6.1.0.4"}, {"status": "affected", "version": "6.2.0.0", "versionType": "semver", "lessThanOrEqual": "6.2.1.2"}]}], "solutions": [{"lang": "en", "value": "ProductAffected Version(s)Fixed-in Version(s)RemediationIBM Sterling Secure Proxy6.1.0.0 - 6.1.0.46.1.0.5 Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes IBM Sterling Secure Proxy6.2.0.0 - 6.2.1.26.2.1.3 Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes \n\n\n\n\n\n\n\nIBM strongly advises upgrading as soon as possible.", "supportingMedia": [{"type": "text/html", "value": "<p></p><div><table><tbody><tr><td>Product</td><td>Affected Version(s)</td><td>Fixed-in Version(s)</td><td>Remediation</td></tr><tr><td>IBM Sterling Secure Proxy</td><td>6.1.0.0 - 6.1.0.4</td><td>6.1.0.5</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software&product=ibm/Other+software/Sterling+Secure+Proxy&release=6.1.0.5&platform=All&function=all\" rel=\"nofollow\">Fix Central</a></td></tr><tr><td>IBM Sterling Secure Proxy</td><td>6.2.0.0 - 6.2.1.2</td><td>6.2.1.3</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software&product=ibm/Other+software/Sterling+Secure+Proxy&release=6.2.1.3&platform=All&function=all\" rel=\"nofollow\">Fix Central</a></td></tr></tbody></table></div><p></p><p>IBM strongly advises upgrading as soon as possible.</p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7289712", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en", "value": "IBM Secure Proxy 6.1.0.0 through 6.2.1.2 could allow a remote authenticated attacker to cause a denial of service due to improper validation of listener IP address and port.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM Secure Proxy 6.1.0.0 through 6.2.1.2 could allow a remote authenticated attacker to cause a denial of service due to improper validation of listener IP address and port.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-11-08T17:56:42.206Z"}}}, "cveMetadata": {"cveId": "CVE-2026-18525", "state": "PUBLISHED", "dateUpdated": "2026-11-09T19:28:57.170Z", "dateReserved": "2026-07-31T19:39:30.937Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-11-08T17:56:42.206Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}