IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo AI Service
ID: ecb58ad7-7b0f-5a08-8c37-0bdffdc005e6
STIX ID: report--ecb58ad7-7b0f-5a08-8c37-0bdffdc005e6
Feed Name: securityonline.info
Threat Score
IBM published patches for three critical vulnerabilities affecting Maximo AI Service, IBM i HTTP Server Administration, and Db2 Mirror for i (CVSS 9.8–9.9). One flaw (Maximo AI Service, CVE-2026-90920) allows unauthenticated remote code execution; the other two enable code injection or privilege escalation when exploited. IBM recommends immediate patching (specific PTFs and version upgrades provided) and restricting administrative access; no active exploitation or public PoC has been reported.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.