CVE-2026-92876 PUBLISHED

IBM Maximo Application Suite - IoT Component Denial of Service

Assigner: ibm
Reserved: 17.09.2026 Published: 12.10.2026 Updated: 12.10.2026

IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Score: 7.5

Product Status

Vendor IBM
Product Maximo Application Suite - IoT Component
Versions
  • Version 9.2.0 is affected
  • Version 9.1.0 is affected
  • Version 9.0.0 is affected

Solutions

IBM strongly recommends addressing the vulnerability now by upgrading.

Remediated Product(s)

Version(s)IBM Maximo Application Suite - IoT Component9.2.3 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery IBM Maximo Application Suite - IoT Component9.1.15  or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery IBM Maximo Application Suite - IoT Component9.0.24  or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery

References

Problem Types

  • CWE-674 Uncontrolled Recursion CWE