CVE-2026-92876: IBM Maximo Application Suite - IoT Component Denial of Service

Published Oct 12, 2026

Updated

IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.

Affected Software

1 affected component

IBM Maximo Application Suite - IoT Component=9.2.0, =9.1.0, =9.0.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Maximo Application Suite - IoT Component to a version that resolves this vulnerability.
Fixed in 9.2.3
Upgrade
Upgrade IBM Maximo Application Suite - IoT Component to a version that resolves this vulnerability.
Fixed in 9.1.15
Upgrade
Upgrade IBM Maximo Application Suite - IoT Component to a version that resolves this vulnerability.
Fixed in 9.0.24

Event History

Oct 12, 2026

CVE Published

via MITRE·09:42 PM

Data Sourced

via MITRE·09:42 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

IBM Maximo Application Suite - IoT Component versions 9.2.0, 9.1.0, and 9.0.0 are identified as affected.

Does exploitation require authentication or user interaction?

No. The provided CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction.

What is the expected impact of successful exploitation?

A remote attacker could cause a denial of service through uncontrolled recursion. The provided impact vector indicates availability impact only, with no stated confidentiality or integrity impact.