CVE-2026-105052 — IBM Maximo Application Suite Information Disclosure

CVE-2026-105052

IBM Maximo Application Suite Information Disclosure PUBLISHED

Description (CNA)

IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

Affected (CNA)

Vendor / product	Versions
IBM / Maximo Application Suite	affected 8.10; affected 8.11; affected 9.0; affected 9.1; affected 9.2

CWE

CWE-22

References

https://www.ibm.com/support/pages/node/7290791

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.