CVE-2026-90912 Maximo AI Service Denial of Service

IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

CVE-2026-90920 Maximo AI Service Code Injection

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation...

CVE-2026-90920

The IBM Maximo AI Service versions 9.1.0 and 9.2.0 are vulnerable to a Code Injection vulnerability (CWE-94). A remote attacker can execute arbitrary code because of improper control over code generation. The vulnerability has a CRITICAL severity score of 9.8, allowing for high impact on confiden...

CVE-2026-90921 Maximo AI Service Denial of Service

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process...

CVE-2026-90921

IBM Maximo AI Service versions 9.1.0 and 9.2.0 are vulnerable to a Denial of Service (DoS) attack due to improper handling of malformed frames. The root cause is identified as CWE-130: Improper Handling of Length Parameter Inconsistency , which can lead to the termination of the host process when...

CVE-2026-92876 IBM Maximo Application Suite - IoT Component Denial of Service

IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

CVE-2026-92876

The IBM Maximo Application Suite - IoT Component versions 9.2.0 , 9.1.0 , and 9.0.0 are vulnerable to a Denial of Service (DoS) attack. The root cause is identified as uncontrolled recursion (CWE-674), which can be triggered by a remote attacker over the network. The vulnerability results in a hi...

CVE-2026-75881

IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite parsing loop when processing certain inputs...

CVE-2026-78673

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation...

CVE-2026-18529

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes operator task...

CVE-2026-18513

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less Custom Resource Definition...

CVE-2026-18517

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended network egress due to a misconfigured Kubernetes NetworkPolicy...

CVE-2026-18533

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image configuration in a Kubernetes operator template...

CVE-2026-18537

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image reference in a Kubernetes operator template...

CVE-2026-105052

IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2026-18513 IBM Maximo Application Suite - Location Service for Esri Component Improper Privilege Management

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less Custom Resource Definition...

EUVD-2026-97904

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less Custom Resource Definition...

CVE-2026-18513

The IBM Maximo Application Suite - Location Service for Esri Component versions 9.2 , 9.1 , and 9.0 are vulnerable to improper access control (CWE-269) due to a schema-less Custom Resource Definition . This flaw allows a CR author to redirect the arcgis-admin RoleBinding to their own ServiceAccou...

CVE-2026-18517 IBM Maximo Application Suite - Location Service for Esri Component Improper Access Control

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended network egress due to a misconfigured Kubernetes NetworkPolicy...

EUVD-2026-97903

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended network egress due to a misconfigured Kubernetes NetworkPolicy...