CVE-2026-92876

HighCVSS 7.5

Published: 12/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 13/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile - higher than 23% of all known CVEs

Summary

IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.

Risk Assessment

A remote attacker can cause a denial of service, making the IoT component unavailable. This leads to service disruption and downtime.

Recommendation

Update IBM Maximo Application Suite - IoT Component to a patched version. Until patched, restrict network access to the component and monitor for unusual requests.

Other vulnerabilities in IBM Maximo Application Suite - IoT Component

CVE-2026-75881High
The IoT Component of IBM Maximo Application Suite versions 9.2.0, 9.1.0, and 9.0.0 allows a remote attacker to cause a denial of service. This is due to an infinite parsing loop when processing certain inputs.

Original NVD description (English source)

IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS