---
id: "CVE-2026-3161"
kind: "vulnerability"
aliases: ["CVE-2026-3161"]
title: "IBM Cloud Pak System: weak cryptography lets attackers decrypt sensitive information"
severity: "medium"
cvss: 5.9
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["appliance", "ibm-cloud-pak-system", "infrastructure"]
not_affected_if: []
published_at: "2026-10-19T18:17:07+00:00"
first_seen_at: "2026-10-23T21:57:18+00:00"
updated_at: "2026-10-25T04:08:43+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3161", "first_seen_at": "2026-10-23T21:57:18+00:00"}]
---

# IBM Cloud Pak System: weak cryptography lets attackers decrypt sensitive information

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 use cryptographic algorithms weaker than expected. An attacker who captures encrypted data could decrypt highly sensitive information.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- unknown

## Timeline

- 2026-10-23T21:57:18+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-3161

## From the sources

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_