CVE-2026-18531
Medium · 5.3CVSS
5.3
EPSS
0.4%
Published
Aug 5, 2026
CISA due date
—
The record
IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC session signing secret.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-79981 The DNS stub resolver in subsys/net/lib/dns/resolve.c binds one UDP socket per configured… CWE-330
- CVE-2026-106074 A flaw in Node.js `crypto` causes the internal entropy caches used by… CWE-330
- CVE-2026-46347 The Goobi viewer is a web application that allows digitised material to be displayed in a… CWE-330
- CVE-2026-46346 The Goobi viewer is a web application that allows digitised material to be displayed in a… CWE-330
- CVE-2026-55889 XDG Desktop Portal is a desktop integration portal. CWE-330
- CVE-2026-114576 A vulnerability has been found in Linksys RE6250 1.0.04.001. CWE-330
- CVE-2026-53939 OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption… CWE-330
- CVE-2026-79575 The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current… CWE-330