IBM Maximo AI Service Multiple Vulnerabilities and Patch Advisory

Vulnerability Overview IBM Maximo AI Service utilizes multiple third-party dependencies that contain several CVE vulnerabilities. Specifically, these include: CVE-2026-24001: Denial of service vulnerability in the method of the jsdiff library. CVE-2026-48864: Heap buffer overflow vulnerability in the libsol library. CVE-2026-48815: Unverified certificate OIDs issue in the sigstore-js library. CVE-2026-78673: Improper input validation issue in Maximo AI Service. CVE-2026-45447: Use-after-free vulnerability in the OpenSSL library. CVE-2026-90921: Inconsistent handling of length parameters issue in Maximo AI Service. CVE-2026-90912: Uncontrolled recursion issue in Maximo AI Service. CVE-2026-90911: Uncontrolled resource consumption issue in Maximo AI Service. Affected Versions Affected Products: Maximo AI Service 9.1.0 and 9.2.0 Operating System: RedHat OpenShift Software Versions: 9.1, 9.2 Remediation IBM strongly recommends upgrading immediately to resolve the vulnerabilities via the following methods: Maximo AI Service: Upgrade to version 9.1.19 or the latest version (available under "Update Available" in the Catalog). Maximo AI Service: Upgrade to version 9.2.3 or the latest version (available under "Update Available" in the Catalog). Additional Information Initial Publication Date: October 1, 2026 Document Number: 7290473 Modified Date: October 1, 2026 References Complete CVSS v3 Guide On-line Calculator v3 Related Resources IBM Secure Engineering Web Portal IBM Product Security Incident Response Blog Disclaimer According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an open industry standard intended to convey vulnerability severity and help determine response urgency and priority. IBM provides CVSS scores "as is" without any express or implied warranties. Customers are responsible for assessing the impact of vulnerabilities on their own environments. IBM does not guarantee that all unsupported versions will receive fixes.

Goal Reached Thanks to every supporter — we hit 100%!

IBM Maximo AI Service Multiple Vulnerabilities and Patch Advisory

More from this source