---
id: "CVE-2025-36061"
kind: "vulnerability"
aliases: ["CVE-2025-36061"]
title: "IBM TS4500 tape library: crafted SMTP requests cause denial of service"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["ibm-storage", "infrastructure", "smtp", "tape-library"]
not_affected_if: []
published_at: "2026-10-19T23:17:35+00:00"
first_seen_at: "2026-10-23T21:57:19+00:00"
updated_at: "2026-10-25T03:55:43+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-36061", "first_seen_at": "2026-10-23T21:57:19+00:00"}]
---

# IBM TS4500 tape library: crafted SMTP requests cause denial of service

IBM Storage TS4500 and Diamondback tape library firmware from 1.1.1.6 through 1.12.0.3 can be made to consume excessive system resources by specially crafted SMTP requests. An authenticated user can use this to cause a denial of service.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-23T21:57:19+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-36061

## From the sources

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_