Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.

Summary Maximo AI Service uses accelerate-1.6.0-py3-none-any.whl, protobuf-4.25.8-cp37-abi3-manylinux2014x8664.whl, pillow-10.3.0-cp311-cp311-manylinux228x8664.whl, langchain-0.3.23-py3-none-any.whl, nltk-3.9.1-py3-none-any.whl, langchaincore-0.3.81-py3-none-any.whl,...

Security Bulletin: Maximo AI Service uses cryptography-46.0.6-cp311-abi3-manylinux_2_34_x86_64.whl and tomcat-embed-core-10.1.54.jar which are vulnerable to CVE-2026-39892, CVE-2026-41293, CVE-2026-43512, CVE-2026-43513 and CVE-2026-43515.

Summary Maximo AI Service uses cryptography-46.0.6-cp311-abi3-manylinux234x8664.whl and tomcat-embed-core-10.1.54.jar which are vulnerable to CVE-2026-39892, CVE-2026-41293, CVE-2026-43512, CVE-2026-43513 and CVE-2026-43515. This bulletin contains information regarding the vulnerability and its...

Security Bulletin: IBM Maximo Application Suite uses ip-address-10.1.0.tgz and fast-xml-builder-1.1.5.tgz which are vulnerable to CVE-2026-44664, CVE-2026-44665 and CVE-2026-42338.

Summary IBM Maximo Application Suite uses ip-address-10.1.0.tgz and fast-xml-builder-1.1.5.tgz which are vulnerable to CVE-2026-44664, CVE-2026-44665 and CVE-2026-42338. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-42338...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses idna-3.13-py3-none-any.whl which is vulnerable to CVE-2026-45409.

Summary IBM Maximo Application Suite - Visual Inspection component uses idna-3.13-py3-none-any.whl which is vulnerable to CVE-2026-45409. This bulletin contains information regarding the vulnerability and its remediation Vulnerability Details CVEID:CVE-2026-45409 DESCRIPTION: Internationalized...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses ip-address-10.1.0.tgz which is vulnerable to CVE-2026-42338

Summary IBM Maximo Application Suite - Visual Inspection component uses ip-address-10.1.0.tgz which is vulnerable to CVE-2026-42338. This bulletin contains information regarding the vulnerability and its remediation Vulnerability Details CVEID:CVE-2026-42338 DESCRIPTION: ip-address is a library f...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses h2-4.1.0-py3-none-any.whl which is vulnerable to CVE-2025-57804

Summary IBM Maximo Application Suite - Visual Inspection component uses h2-4.1.0-py3-none-any.whl which is vulnerable to CVE-2025-57804. This bulletin contains information regarding the vulnerability and its remediation Vulnerability Details CVEID:CVE-2025-57804 DESCRIPTION: h2 is a pure-Python...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses urllib3-2.6.3-py3-none-any.whl which is vulnerable to CVE-2026-44431, CVE-2026-44432

Summary IBM Maximo Application Suite - Visual Inspection component uses urllib3-2.6.3-py3-none-any.whl which is vulnerable to CVE-2026-44431, CVE-2026-44432, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-44431 DESCRIPTION:...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses redis-5.2.1-py3-none-any.whlwhich is vulnerable to CVE-2021-31294

Summary IBM Maximo Application Suite - Visual Inspection component uses redis-5.2.1-py3-none-any.whlwhich is vulnerable to CVE-2021-31294 , This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2021-31294 DESCRIPTION: Redis before...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses setuptools which is vulnerable to CVE-2024-6345

Summary IBM Maximo Application Suite - Visual Inspection component uses setuptools which is vulnerable to CVE-2024-6345, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2024-6345 DESCRIPTION: A vulnerability in the packageindex...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses requests-2.32.4-py3-none-any.whl which is vulnerable to CVE-2026-25645

Summary IBM Maximo Application Suite - Visual Inspection component uses requests-2.32.4-py3-none-any.whl which is vulnerable to CVE-2026-25645. This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-25645 DESCRIPTION: Requests is a...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses cryptography-46.0.5-cp311-abi3-manylinux_2_34_x86_64.whl which is vulnerable to CVE-2026-34073, CVE-2026-39892

Summary IBM Maximo Application Suite - Visual Inspection component uses cryptography-46.0.5-cp311-abi3-manylinux234x8664.whl which is vulnerable to CVE-2026-34073, CVE-2026-39892, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details...

Security Bulletin: IBM Maximo Application Suite uses postcss-8.4.49.tgz and WebSphere Application Server Liberty which is vulnerable to CVE-2025-14915, CVE-2025-14917, CVE-2026-1561 and CVE-2026-41305.

Summary IBM Maximo Application Suite uses postcss-8.4.49.tgz and WebSphere Application Server Liberty which is vulnerable to CVE-2025-14915, CVE-2025-14917, CVE-2026-1561 and CVE-2026-41305. This bulletin contains information regarding the vulnerabilities and their fixture. Vulnerability Details...

Security Bulletin: IBM Maximo Application Suite - Manage Component uses ws-8.17.1 in inspections application which is vulnerable to CVE-2026-45736

Summary IBM Maximo Application Suite - Manage Component uses ws-8.17.1 in inspections application which is vulnerable to CVE-2026-45736. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-45736 DESCRIPTION: ws is an open source...

Security Bulletin: There is a vulnerability in idna-3.13-py3-none-any.whl used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-45409)

Summary There is a vulnerability in idna-3.13-py3-none-any.whl used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2026-45409 DESCRIPTION: Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domai...

Security Bulletin: There is a vulnerability in urllib3-2.6.3-py3-none-any.whl used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-44431)

Summary There is a vulnerability in urllib3-2.6.3-py3-none-any.whl used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2026-44431 DESCRIPTION: urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followe...

Security Bulletin: IBM Maximo Application Suite uses uuid-9.0.1.tgz which is vulnerable to CVE-2026-41907.

Summary IBM Maximo Application Suite uses uuid-9.0.1.tgz which is vulnerable to CVE-2026-41907. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior...

Security Bulletin: IBM Maximo Application Suite uses marked-14.0.0.tgz which is vulnerable to CVE-2026-41680

Summary IBM Maximo Application Suite uses marked-14.0.0.tgz which is vulnerable to CVE-2026-41680. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-41680 DESCRIPTION: Marked is a markdown parser and compiler. From 18.0.0 to 18.0....

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses pillow-11.3.0 which is vulnerable to CVE-2026-40192

Summary IBM Maximo Application Suite - Visual Inspection component uses pillow-11.3.0 which is vulnerable to CVE-2026-40192, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-40192 DESCRIPTION: Pillow is a Python imaging...

Security Bulletin: IBM Maximo Scheduler Optimizer uses axios-1.15.0.tgz which is vulnerable to CVE-2026-42033

Summary IBM Maximo Scheduler Optimizer uses axios-1.15.0.tgz which is vulnerable to CVE-2026-42033. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-42033 DESCRIPTION: Axios is a promise based HTTP client for the browser and...

Security Bulletin: IBM Maximo Scheduler Optimizer uses path-to-regexp-0.1.12.tgz which is vulnerable to CVE-2026-4867

Summary IBM Maximo Scheduler Optimizer uses path-to-regexp-0.1.12.tgz which is vulnerable to CVE-2026-4867 This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-4867 DESCRIPTION: Impact: A bad regular expression is generated any time...