Skip to content
OpenAdvisories
High · 8.7 CVE-2026-18529 EUVD-2026-97902GHSA-x88v-wqgp-4r5r

IBM Maximo Application Suite - Location Service for Esri Component Code Execution

Published Oct 12, 2026 · Updated Oct 14, 2026 · Assigned by ibm

Vendor: IBM Product: Maximo Application Suite - Location Service for Esri Component

Description

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes operator task.

Affected products

VendorProductAffectedFixed
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, 9.0 —

References