{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aibmmaximo_application_suite9.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ibm:maximo_application_suite:8.10:*:*:*:*:*:*:*","cpe:2.3:a:ibm:maximo_application_suite:8.11:*:*:*:*:*:*:*","cpe:2.3:a:ibm:maximo_application_suite:9.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:maximo_application_suite:9.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:maximo_application_suite:9.2:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-105052"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Maximo Application Suite (8.10, 8.11, 9.0, 9.1, 9.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eIBM Maximo Application Suite versions 8.10, 8.11, 9.0, 9.1, and 9.2 contain a directory traversal vulnerability identified as CVE-2026-105052. The flaw exists within the application's request processing logic, allowing a remote, unauthenticated attacker to bypass security controls by injecting path traversal sequences, specifically \u0026quot;dot dot\u0026quot; characters (e.g., /../), into URL requests.\u003c/p\u003e\n\u003cp\u003eSuccessful exploitation enables an attacker to navigate outside the intended application directory and retrieve sensitive files from the underlying server's filesystem. This vulnerability poses a critical risk to data confidentiality, as it may allow access to configuration files, credentials, or other sensitive system artifacts. Defenses should focus on identifying abnormal URL structures and path-traversal indicators in web server logs for the affected application endpoints.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation leads to unauthorized disclosure of sensitive information stored on the host filesystem. This impact is significant given the nature of IBM Maximo as an enterprise asset management platform, which often holds critical business and operational data. If exploited, an attacker could potentially obtain environment-specific configuration secrets or application data, facilitating further compromise.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to a patched version of IBM Maximo Application Suite as soon as the vendor makes one available.\u003c/li\u003e\n\u003cli\u003eInspect web server access logs for anomalous URL strings containing double-dot sequences (e.g., /../, %2e%2e/, %2f%2e%2e%2f) directed at the application.\u003c/li\u003e\n\u003cli\u003eImplement Web Application Firewall (WAF) rules to block or alert on incoming requests containing directory traversal sequences directed at the IBM Maximo Application Suite environment.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-12T22:41:31Z","date_published":"2026-10-12T22:41:31Z","id":"https://feed.craftedsignal.io/briefs/2026-10-ibm-maximo-traversal/","summary":"IBM Maximo Application Suite versions 8.10 through 9.2 are susceptible to unauthenticated directory traversal, allowing remote attackers to read arbitrary files via crafted URL requests.","title":"Directory Traversal Vulnerability in IBM Maximo Application Suite","url":"https://feed.craftedsignal.io/briefs/2026-10-ibm-maximo-traversal/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:ibm:maximo_application_suite:9.1:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}