PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-18513 IBM CVE debrief

IBM Maximo Application Suite - Location Service for Esri Component Improper Privilege Management vulnerability allows for improper access control due to a schema-less Custom Resource Definition. This issue affects versions 9.2, 9.1, and 9.0 of the component. The vulnerability has a high CVSS score of 7.2, indicating a significant risk. Defenders and administrators responsible for IBM Maximo Application Suite - Location Service for Esri Component should verify exposure and assess the need for updates or patches. The CVE record and source item provide details on the vulnerability, and defenders should review and implement the vendor-provided patch or advisory.

Vendor
IBM
Product
Maximo Application Suite - Location Service for Esri Component
CVSS
HIGH 7.2
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-12
Original CVE updated
2026-10-12
Advisory published
2026-10-12
Advisory updated
2026-10-12

Who should care

Defenders and administrators responsible for IBM Maximo Application Suite - Location Service for Esri Component should verify exposure and assess the need for updates or patches.

Why it matters

CVE-2026-18513 allows for improper access control in IBM Maximo Application Suite - Location Service for Esri Component due to a schema-less Custom Resource Definition. Defenders should verify exposure, assess the need for updates or patches, and implement compensating controls as necessary.

  • Verification of exposure for IBM Maximo Application Suite - Location Service for Esri Component versions 9.2, 9.1, and 9.0 is required.
  • Assessment of the need for updates or patches to address the improper access control vulnerability.
  • Implementation of compensating controls may be necessary until patches are applied.

Technical summary

IBM Maximo Application Suite - Location Service for Esri Component is vulnerable to improper access control due to a schema-less Custom Resource Definition, affecting versions 9.2, 9.1, and 9.0. The vulnerability has a high CVSS score of 7.2. The issue allows for improper access control, which can lead to unauthorized access and potential data breaches. Defenders should prioritize verifying exposure and assessing the need for updates or patches for IBM Maximo Application Suite - Location Service for Esri Component versions 9.2, 9.1, and 9.0.

Defensive priority

Defenders should prioritize verifying exposure and assessing the need for updates or patches for IBM Maximo Application Suite - Location Service for Esri Component versions 9.2, 9.1, and 9.0.

Recommended defensive actions

  • Verify if IBM Maximo Application Suite - Location Service for Esri Component versions 9.2, 9.1, or 9.0 are in use and assess the need for updates or patches.
  • Review and implement the vendor-provided patch or advisory.
  • Monitor for any additional information from IBM regarding this vulnerability.

Evidence notes

The CVE record and source item provide details on the vulnerability in IBM Maximo Application Suite - Location Service for Esri Component. The NVD entry is currently not provided.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-18513 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-18513

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-18513 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-18513

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.