CVE-2026-18517

Received Received - Intake

IBM Maximo Application Suite NetworkPolicy Misconfiguration Leads to Unintended Network Egress

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: IBM Corporation

Description

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended network egress due to a misconfigured Kubernetes NetworkPolicy.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-12

Generated

2026-10-13

AI Q&A

2026-10-13

EPSS Evaluated

N/A

NVD

CVE-2026-18517

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	Maximo	Application Suite - Location Service for Esri Component 9.2
IBM	Maximo	Application Suite - Location Service for Esri Component 9.1
IBM	Maximo	Application Suite - Location Service for Esri Component 9.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

IBM Maximo Application Suite's Location Service for Esri Component has a misconfigured Kubernetes NetworkPolicy that allows unintended network egress. This means the component may send data outside the intended network boundaries, potentially exposing sensitive information.

Impact Analysis

This vulnerability could lead to unauthorized data transmission, data leaks, or exposure of sensitive information. Attackers might exploit it to exfiltrate data if network policies are bypassed.

Compliance Impact

This vulnerability may violate data protection requirements in GDPR and HIPAA by enabling unauthorized data egress. Organizations could face compliance violations, fines, or legal consequences if sensitive data is exposed.

Mitigation Strategies

Review and correct the Kubernetes NetworkPolicy configuration for the IBM Maximo Application Suite - Location Service for Esri Component to restrict unintended network egress. Ensure policies are properly defined to limit traffic to only necessary destinations.

Hi! I’m here to help you understand CVE-2026-18517. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70