Description
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.
Published: 2026-10-12
Score: 7.5 High
EPSS: n/a
KEV: No
Impact: Denial of Service
Action: Patch Now
AI Analysis

Impact

IBM Maximo AI Service versions 9.1.0 and 9.2.0 contain an improper input validation flaw that can lead a remote attacker to trigger a denial of service. The vulnerability allows the attacker to send specially crafted input to the AI service, which is not adequately validated before processing. This can exhaust service resources or disrupt operation, resulting in interruption of normal service availability.

Affected Systems

Affected clients use IBM Maximo AI Service versions 9.1.0 and 9.2.0; the fix is available in revision 9.1.19 and 9.2.3, respectively, or the latest builds from IBM’s catalog. Upgrading to those or newer revisions removes the flaw.

Risk and Exploitability

The CVSS score of 7.5 classifies the flaw as high severity. No EPSS data is published, and the vulnerability is not listed in CISA’s KEV catalog. Based on the description, it is inferred that a remote attacker who can reach the service endpoint can send malformed input to trigger denial of service, making the flaw practical for adversaries with network access to Maximo AI Service.

Generated by OpenCVE AI on October 12, 2026 at 22:42 UTC.

Remediation

Vendor Solution

IBM strongly recommends addressing the vulnerability now by upgrading  Remediated Product(s)Version(s)Maximo AI Service9.1.19 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery Maximo AI Service9.2.3 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery

OpenCVE Recommended Actions

  • Upgrade IBM Maximo AI Service to the latest release—9.1.19 or later for the 9.1 series, or 9.2.3 or later for the 9.2 series.
  • If immediate upgrade is not possible, modify the service configuration to enforce strict input validation and reject malformed requests.
  • Continuously monitor system performance and network traffic to detect abnormal activity indicating a potential denial‑of‑service attempt.

Generated by OpenCVE AI on October 12, 2026 at 22:42 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 12 Oct 2026 21:15:00 +0000

Type Values Removed Values Added
Description IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.
Title Maximo AI Service Improper Input Validation
First Time appeared Ibm
Ibm maximo Ai Service
Weaknesses CWE-20
CPEs cpe:2.3:a:ibm:maximo_ai_service:9.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_ai_service:9.2.0:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm maximo Ai Service
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

Ibm Maximo Ai Service
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-10-12T21:04:46.890Z

Reserved: 2026-08-25T00:48:36.774Z

Link: CVE-2026-78673

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-12T21:17:21.463

Modified: 2026-10-12T21:17:21.463

Link: CVE-2026-78673

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-12T22:45:16Z

Weaknesses
  • CWE-20

    Improper Input Validation