What’s Vulnerable › Vulnerabilities
CVE-2025-36057: IBM Cognos Analytics Mobile (iOS) authentication bypass
- Severity: medium (CVSS 4.6 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-07-21 · updated 2026-06-17
- Weakness: CWE-299
Description
IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 is vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application.
Affected products
- IBM Cognos Analytics Mobile: from 1.1.0 before 1.1.23 — fixed in 1.1.23
How to fix
Upgrade to a fixed version: IBM Cognos Analytics Mobile 1.1.23. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-36057 or the next vulnerability affects your stack