CVE-2026-18537

Published 12 October 2026 · tracked since 13 October 2026

Description

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image reference in a Kubernetes operator template.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-104935
• CVE-2026-109573 HIGH 8.1
• CVE-2026-84312 HIGH 7.1
• CVE-2026-41210 MEDIUM 6.5
• CVE-2026-84316 HIGH 8.8
• CVE-2026-84317 HIGH 8.8
• CVE-2026-84318 HIGH 8.8
• CVE-2026-84319 HIGH 8.3
• CVE-2026-84320 MEDIUM 6.3
• CVE-2026-84321 MEDIUM 5.4

→ Open the live CVE board · all tools