{"vulnerability": "CVE-2026-18529", "sightings": [{"uuid": "5a3a6fab-f193-460f-82a3-fa6cf61a18f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18529", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117430167534621234", "content": "CVE-2026-18529 IBM Maximo Application Suite - Location Service for Esri Component Code Execution IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes operator task.\nhttps://www.cve.org/CVERecord?id=CVE-2026-18529https://www.ibm.com/support/pages/node/7290070#ibm #IBM #MaximoApplicationSuite-LocationServiceforEsriComponent#CVE_2026_18529#bot", "creation_timestamp": "2026-10-12T21:55:56.673701Z"}]}