[ CVE-2026-105052 · Published 12 Oct 2026 ]
Vulnerability in IBM Maximo Application Suite
CVSS 7.5
EPSS <1%No fix listed yet
[ Description ]Official description
IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.