CVE-2026-90912
HighCVSS 7.5Summary
IBM Maximo AI Service 9.1.0 and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
Risk Assessment
Uncontrolled recursion can lead to resource exhaustion and service unavailability.
Recommendation
Apply security updates from IBM and restrict access to the service.
Other vulnerabilities in IBM Maximo AI Service
See all- CVE-2026-90921High
IBM Maximo AI Service 9.1.0 and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.
- CVE-2026-90911High
IBM Maximo AI Service 9.1.0 and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
- CVE-2026-78673High
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.
- CVE-2026-90920Critical
IBM Maximo AI Service 9.1.0 and 9.2.0 contains a vulnerability related to improper control of code generation. A remote attacker can exploit this to execute arbitrary code.
Original NVD description (English source)
IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS