CVE-2025-13375

—

CVSS 3.1

9.8 critical

EPSS

<1%p42

Published

Feb 4, 2026 (Feb 4, 2026)

Modified

Jun 17, 2026

Description

IBM Common Cryptographic Architecture (CCA) 7.5.52 and 8.4.82 could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system.

Weakness: CWE-250
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.