CVE-2026-78673: Maximo AI Service Improper Input Validation

Q: Which deployments are affected?

IBM Maximo AI Service versions 9.1.0 and 9.2.0 are identified as affected.

Q: Does exploitation require authentication or user interaction?

No. The vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction.

Q: What is the likely impact of exploitation?

A remote attacker could cause a denial of service. The provided impact metrics indicate availability impact only, with no stated confidentiality or integrity impact.

Published Oct 1, 2026

Updated

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.

Other sources

Maximo AI Service could allow a remote attacker to cause a denial of service due to improper input validation.

— IBM

Affected Software

3 affected components

IBM Maximo AI Service=9.1.0, =9.2.0

IBM Maximo AI Service<=9.1.0

IBM Maximo AI Service<=9.2.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Maximo AI Service to a version that resolves this vulnerability.
Fixed in 9.1.19
Upgrade
Upgrade Maximo AI Service to a version that resolves this vulnerability.
Fixed in 9.2.3

Event History

Oct 1, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Oct 12, 2026

CVE Published

via MITRE·09:01 PM

Data Sourced

via MITRE·09:01 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7290473

Frequently Asked Questions

Which deployments are affected?

IBM Maximo AI Service versions 9.1.0 and 9.2.0 are identified as affected.

Does exploitation require authentication or user interaction?

No. The vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction.

What is the likely impact of exploitation?

A remote attacker could cause a denial of service. The provided impact metrics indicate availability impact only, with no stated confidentiality or integrity impact.

CVE-2026-78673: Maximo AI Service Improper Input Validation

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or user interaction?

What is the likely impact of exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or user interaction?

What is the likely impact of exploitation?