Is CVE-2026-18531 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-18531?

CVE-2026-18531 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-18531

Description

IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC session signing secret.