CVE-2026-75881

Received Received - Intake

Denial of Service in IBM Maximo IoT Component

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: IBM Corporation

Description

IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite parsing loop when processing certain inputs.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-12

Generated

2026-10-13

AI Q&A

2026-10-13

EPSS Evaluated

N/A

NVD

CVE-2026-75881

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	Maximo	Application Suite - IoT Component 9.2.0
IBM	Maximo	Application Suite - IoT Component 9.1.0
IBM	Maximo	Application Suite - IoT Component 9.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

IBM Maximo Application Suite - IoT Component versions 9.2.0, 9.1.0, and 9.0.0 are vulnerable to a denial of service attack. A remote attacker can exploit this by sending specially crafted inputs that cause an infinite parsing loop, leading to system resource exhaustion.

Detection Guidance

This vulnerability can be detected by monitoring for excessive resource usage or unresponsive services in IBM Maximo Application Suite - IoT Component versions 9.2.0, 9.1.0, or 9.0.0. Check for infinite parsing loops by inspecting logs for repeated parsing attempts or timeouts.

Impact Analysis

This vulnerability can cause your IBM Maximo IoT system to become unresponsive or crash, disrupting operations. It may lead to downtime, loss of productivity, and potential data unavailability for users relying on the system.

Compliance Impact

This vulnerability causes a denial of service due to an infinite parsing loop, which could disrupt system availability. For compliance standards like GDPR or HIPAA, availability is a key requirement, so prolonged outages may lead to violations if critical data processing is interrupted.

Mitigation Strategies

Apply the latest security patches or updates provided by IBM for the Maximo Application Suite - IoT Component. If patches are unavailable, consider disabling the affected component or restricting network access to it until a fix is applied.

Hi! I’m here to help you understand CVE-2026-75881. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70