Tools AI Risk Radar ai-incident-0228
Incident record
IBM fixes denial of service in Maximo AI Service
- Severity
- High
- Status
- Patched
- Type
- Infra Vuln
- Target
- IBM Maximo AI Service 9.1 and 9.2
- Actor
- researcher
- CVE
- CVE-2026-90911
What happened
IBM’s bulletin groups resource-consumption, recursion and malformed-frame vulnerabilities that can disrupt Maximo AI Service. Each is rated 7.5 High.
The bulletin was first published on 1 October; CNA records for CVE-2026-90911, CVE-2026-90912 and CVE-2026-90921 followed on 12 October. IBM identifies 9.1.19 and 9.2.3, or the latest applicable catalogue, as remediation for their respective branches. CVE-2026-90912 specifically concerns the SaaS product. This entry groups the three related denial-of-service disclosures.
Sources
- IBM security bulletinwww.ibm.com/support/pages/node/7290473
- CVE-2026-90911cveawg.mitre.org/api/cve/CVE-2026-90911
- CVE-2026-90912cveawg.mitre.org/api/cve/CVE-2026-90912
- CVE-2026-90921cveawg.mitre.org/api/cve/CVE-2026-90921
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 28 October 2026