CVE-2026-75881

HighCVSS 7.5

Published: 12/10/2026(UTC)Updated: 13/10/2026(UTC)Translated: 13/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile - higher than 22% of all known CVEs

Summary

The IoT Component of IBM Maximo Application Suite versions 9.2.0, 9.1.0, and 9.0.0 allows a remote attacker to cause a denial of service. This is due to an infinite parsing loop when processing certain inputs.

Risk Assessment

An attacker can cause the IoT service to hang or become unavailable by submitting specially crafted input, disrupting device monitoring and management.

Recommendation

Update the IBM Maximo Application Suite IoT Component to a patched version and consider restricting access to input-accepting interfaces.

Other vulnerabilities in IBM Maximo Application Suite - IoT Component

CVE-2026-92876High
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.

Original NVD description (English source)

IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite parsing loop when processing certain inputs.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS