MajorCritical vulnerability
CVE-2026-18529 (CVSS 8.7)
NVD · officialPublished Oct 12, 2026Risk 37/100
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes operator task.
Technical details
CVSS
8.7
AV:NetworkAC:LowPR:HighUI:NoneC:HighI:HighA:None
Evidence and sources
This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.
Open primary source