CVE-2026-90920

LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

Recommended action window: Monitor and triage in normal cycle

0.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Activity timeline3 mentions / 2d

Referenced assets3 URLs

By indicator

Full discourse3 posts

kokumօtօ@__kokumoto21h
IBMがIBM i、Db2 Mirror、Maximo AI Serviceのそれぞれで重大(Critical)な脆弱性を修正。前2者はCVSSスコア9.9で認証後ユーザによる任意コード実行(CVE-2026-96119, CVE-2026-96012)。後者はCVSSスコア9.8の無認証遠隔コード実行(CVE-2026-90920)。 https://securityonline.info/ibm-critical-vulnerabilities-ibm-i-db2-maximo/
01011677
7.8K followersView on X
Severity Daily@severitydaily1d
IBM filed a 9.8 unauthenticated RCE in its own Maximo AI Service inside a bulletin titled for third-party dependencies, and left it out of the summary's list of 19. No exploitation reported. https://severitydaily.com/ibm-maximo-ai-service-cve-2026-90920-9-8-code-execution-missing-from-bulletin-summary-19-of-23/
0000034
34 followersView on X
The Hacker Wire@TheHackerWire1d
🚨 CVE-2026-90920 (CVSS 9.8 Critical) IBM Maximo AI Service allows unauthenticated remote attackers to execute arbitrary code via improper code generation controls in enterprise AI clusters. https://www.thehackerwire.com/vulnerability/CVE-2026-90920/ https://t.co/kXkuvS3tJO
0000047
179 followersView on X