IBM Maximo AI Service Denial of Service Vulnerability

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: IBM Corporation

Description

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-12

Generated

2026-10-13

AI Q&A

2026-10-13

EPSS Evaluated

N/A

NVD

CVE-2026-90911

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	Maximo	AI Service 9.1.0
IBM	Maximo	AI Service 9.2.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

IBM Maximo AI Service versions 9.1.0 and 9.2.0 are vulnerable to a denial of service attack due to uncontrolled resource consumption. This means a remote attacker could exploit this flaw to exhaust system resources, making the service unavailable to legitimate users.

Impact Analysis

This vulnerability could disrupt the availability of IBM Maximo AI Service, leading to service outages or degraded performance. If you rely on this service for critical operations, you may experience downtime or reduced functionality until the issue is resolved.

Mitigation Strategies

Apply IBM's official patches or updates for IBM Maximo AI Service versions 9.1.0 and 9.2.0 to address uncontrolled resource consumption issues.

Hi! I’m here to help you understand CVE-2026-90911. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70