Network Egress Vulnerability in IBM Maximo Application Suite for Esri Component
CVE-2026-18517

7.7HIGH

Key Information:

Vendor

IBM
Status
Maximo Application Suite - Location Service For Esri Component
Vendor
CVE Published:
12 October 2026

What is CVE-2026-18517?

The IBM Maximo Application Suite for Esri Component has a vulnerability that allows unintended network egress due to a misconfigured Kubernetes NetworkPolicy. This misconfiguration may lead to unauthorized data leakage or exposure of sensitive information. Users of versions 9.2, 9.1, and 9.0 should review their network policies to mitigate potential risks and ensure their application environment is securely configured.

Affected Version(s)

Maximo Application Suite - Location Service for Esri Component 9.2

Maximo Application Suite - Location Service for Esri Component 9.1

Maximo Application Suite - Location Service for Esri Component 9.0

References

https://www.ibm.com/support/pages/node/7290070
vendor-advisorypatch

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.