CVE-2025-36379: IBM Security QRadar EDR Software has multiple vulnerabilities
Published Feb 11, 2026
·Updated
IBM Security QRadar EDR 3.12 through 3.12.23 IBM Security ReaQta uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Affected Software
2 affected components
IBM Security QRadar EDR<=3.12 - 3.12.23
IBM QRadar EDR>=3.12.0<3.12.24
Remediation
Information
IBM encourages customers to update their systems promptly. Product Fix version IBM Security QRadar EDR 3.12.24 The IBM Security QRadar EDR operator can be upgraded automatically when new compatible versions are available. However, you can control whether an operator is upgraded automatically by setting an approval strategy. Two approval strategies are available: Automatic (default) - New operator versions are installed automatically when they are available on the subscription channel. Manual - When a new operator version is available on the subscription channel, the subscription indicates that an update is available, but you must approve the update manually. For more information about the manual installation process, view Installing QRadar EDR
Event History
Feb 11, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Feb 17, 2026
CVE Published
via MITRE·08:30 PM
Data Sourced
via MITRE·08:30 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:22 PM
DescriptionSeverityWeaknessAffected Software
Mar 3, 58110
Event
via NVD·04:28 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-36379?
CVE-2025-36379 has a high severity rating due to the potential exposure of highly sensitive information.
2
How do I fix CVE-2025-36379?
To remediate CVE-2025-36379, upgrade IBM Security QRadar EDR to version 3.12.24 or later.
3
What versions of IBM Security QRadar EDR are affected by CVE-2025-36379?
CVE-2025-36379 affects IBM Security QRadar EDR versions 3.12 through 3.12.23.
4
What type of vulnerability is CVE-2025-36379?
CVE-2025-36379 consists of multiple vulnerabilities involving weaker than expected cryptographic algorithms.
5
Can CVE-2025-36379 affect my organization's data security?
Yes, CVE-2025-36379 can compromise data security by allowing attackers to decrypt sensitive information.