01 Record
CVE-2026-78673
Maximo AI Service Improper Input Validation
HighPUBLISHEDCNA: ibm
CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
02 Description
Maximo AI Service Improper Input Validation
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- Not scored by EPSS
- EPSS percentile
- Not scored by EPSS
- NVD base score
- 7.5 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVD analysis status
- Received. NVD last modified this record on 2026-10-12.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2026-10-12 21:01Z1 HR AGO
- Last updated
- 2026-10-12 21:04Z1 HR AGO
- Reserved
- 2026-08-25
- Assigning CNA
- ibm
- Record state
- PUBLISHED
- Severity
- High (CVSS 7.5)
- CNA CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-20Improper Input ValidationClass
- Data version
- 5.2
- Document digest
- a1e1929086337c231437362398bdee011ce5a7e3618001b04ddc7c77a3ca2464
05 Affected products
VendorProductVersionsPlatforms
06 References
07 Remediation
IBM strongly recommends addressing the vulnerability now by upgrading Remediated Product(s)Version(s)Maximo AI Service9.1.19 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery Maximo AI Service9.2.3 or the latest (available from the Catalog under Update Available) https://www.ibm.com/docs/en/mas-cd/continuous-delivery