medium5.3
CVE-2026-18531
IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC session signing secret.
Impact
IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC session signing secret.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Maximo Application Suite | from 9.0 before 9.0.28 from 9.1 before 9.1.20 Version 9.2 |