← CVE Intelligence

CVE-2026-18658

IBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressed PUBLISHED

Description (CNA)

IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to SQL injection. An unauthenticated attacker can execute arbitrary SQL statements and leverage database functionality to write a web shell to the application web root, resulting in remote code execution.

Affected (CNA)

Vendor / productVersions
IBM / Operational Decision Manageraffected 9.6.0.0; affected 9.5.0.0; affected 8.11.1.0; affected 8.11.0.1; affected 8.12.0.1; affected 9.5.0.1; affected 9.0.0.1

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.