Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| IBM | Cloud Pak System | affected |
|
No data.
No data.
OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.
No data.
No advisories yet.
Solution
IBM strongly recommends addressing the vulnerability now by https://www.ibm.com/support/pages/node/7284365 For unsupported versions the recommendation is to upgrade to supported version of the product.
Workaround
No workaround given by the vendor.
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7290183 |
|
Mon, 19 Oct 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. | |
| Title | IBM Cloud Pak System Risky Cryptographic Algorithm | |
| First Time appeared |
Ibm
Ibm cloud Pak System |
|
| Weaknesses | CWE-327 | |
| CPEs | cpe:2.3:a:ibm:cloud_pak_system:2.3.6.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:cloud_pak_system:2.3.6.1:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm cloud Pak System |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2026-10-19T17:39:57.551Z
Reserved: 2026-02-24T21:09:16.552Z
Link: CVE-2026-3161
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-19T18:17:07.140
Modified: 2026-10-19T18:17:07.140
Link: CVE-2026-3161
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-10-19T19:00:05Z