CVE-2026-18529

Published 12 October 2026 · tracked since 13 October 2026

Description

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes operator task.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-104935
• CVE-2026-109573 HIGH 8.1
• CVE-2026-84312 HIGH 7.1
• CVE-2026-41210 MEDIUM 6.5
• CVE-2026-84316 HIGH 8.8
• CVE-2026-84317 HIGH 8.8
• CVE-2026-84318 HIGH 8.8
• CVE-2026-84319 HIGH 8.3
• CVE-2026-84320 MEDIUM 6.3
• CVE-2026-84321 MEDIUM 5.4

→ Open the live CVE board · all tools