CVE-2026-18531
published 2026-08-05CVE-2026-18531: IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC session signing secret.
PriorityP429medium5.3CVSS 3.1
AVNACLPRNUINSUCNILAN
EPSS
0.38%
30.6th percentile
IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC session signing secret.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | maximo_application_suite | — | — |
| ibm | maximo_application_suite | — | — |
| ibm | maximo_application_suite | — | — |
| ibm | maximo_application_suite | >= 9.0 < 9.0.28 | 9.0.28 |
| ibm | maximo_application_suite | >= 9.1 < 9.1.20 | 9.1.20 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-05
Published