CVE-2025-36074 is a vulnerability in IBM Security Verify Directory (Container) versions 10.0.0 through 10.0.0.3 where the system fails to validate the type of files uploaded by privileged users. This CWE-434 weakness permits the upload of potentially dangerous files, which could be leveraged to perform further attacks against the system or its users. The CVSS 3.1 base score is 5.5, reflecting a medium severity with network attack vector, low attack complexity, and requiring high privileges but no user interaction. The vulnerability impacts integrity and availability but not confidentiality. No patch or official remediation has been announced, and the product is not a cloud service, so remediation depends on IBM's future updates.

The vulnerability allows a privileged user to upload malicious files without file type validation, potentially compromising system integrity and availability. This could lead to further attacks facilitated by these malicious files. Confidentiality is not affected according to the CVSS vector. There are no known exploits in the wild, so active exploitation has not been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or temporary fix has been provided by IBM, organizations should restrict privileged user access to trusted personnel only and monitor for suspicious file uploads. Follow IBM advisories closely for updates on patches or mitigations.