CVE-2026-90921
HighCVSS 7.5Summary
IBM Maximo AI Service 9.1.0 and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.
Risk Assessment
The attack could cause service unavailability, impacting business continuity.
Recommendation
Apply IBM-provided patches and monitor the system for anomalies.
Other vulnerabilities in IBM Maximo AI Service
See all- CVE-2026-90912High
IBM Maximo AI Service 9.1.0 and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
- CVE-2026-90911High
IBM Maximo AI Service 9.1.0 and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.
- CVE-2026-78673High
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.
- CVE-2026-90920Critical
IBM Maximo AI Service 9.1.0 and 9.2.0 contains a vulnerability related to improper control of code generation. A remote attacker can exploit this to execute arbitrary code.
Original NVD description (English source)
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS