<div style="display:inline;"> <img height="1" width="1" style="border-style:none;" alt="" src="//googleads.g.doubleclick.net/pagead/viewthroughconversion/1066880148/?value=0&amp;label=4oTQCMyJzwQQlJnd_AM&amp;guid=ON&amp;script=0">
Request More Info

«  View All Posts

Maximo Application Suite Security Bulletins November 2026 Blog Feature
Darlene Nerden

By: Darlene Nerden on November 4th, 2026

Print/Save as PDF

Maximo Application Suite Security Bulletins November 2026

IBM | Compliance | Interloc | IBM Maximo Resources | MAS | Compliance Matters | IT Security | IBM MAS | IBM Platinum Partner | IBM Maximo Application Suite | MAS Security Bulletins | ibm maximo updates

IBM has released Maximo Application Suite Security Bulletins. The links to the bulletins are below. The bulletins contain information regarding when, where, and/or how to address the vulnerability.

Security bulletin: Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses Pillow which is vulnerable to CVE-2026-54058, CVE-2026-59197, CVE-2026-59198, CVE-2026-59199, CVE-2026-59200, CVE-2026-59203, CVE-2026-59204, CVE-2026-59205 –

https://www.ibm.com/support/pages/node/7290015?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses multiple dependencies which are vulnerable to multiple High Severity CVEs 

https://www.ibm.com/support/pages/node/7290014?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite - Location Service for Esri Component is vulnerable to CVE-2026-18513, CVE-2026-18537, CVE-2026-18529, CVE-2026-18533, CVE-2026-18517 and CVE-2026-88029 –

https://www.ibm.com/support/pages/node/7290070?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs –

https://www.ibm.com/support/pages/node/7290136?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs –

https://www.ibm.com/support/pages/node/7290137?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: IBM Edge Data Collector uses multiple dependencies which are vulnerable to multiple CVEs –

https://www.ibm.com/support/pages/node/7290135?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite - Monitor Component uses Websphere application which is vulnerable to multiple CVEs –

https://www.ibm.com/support/pages/node/7290134?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs –

https://www.ibm.com/support/pages/node/7290138?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite uses log4j-api-2.25.4.jar which is vulnerable to CVE-2026-49844 –

https://www.ibm.com/support/pages/node/7290167?myns=swgother&mynp=OCSSJ5IPE&mync=E&cm_sp=swgother-_-OCSSJ5IPE-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs –

https://www.ibm.com/support/pages/node/7290173?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite uses postcss-8.5.10.tgz which is vulnerable to CVE-2026-69153 –

https://www.ibm.com/support/pages/node/7290170?myns=swgother&mynp=OCSSJ5IPE&mync=E&cm_sp=swgother-_-OCSSJ5IPE-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite uses dompurify-3.4.7.tgz which is vulnerable to CVE-2026-66010 –

https://www.ibm.com/support/pages/node/7290169?myns=swgother&mynp=OCSSJ5IPE&mync=E&cm_sp=swgother-_-OCSSJ5IPE-_-E

Security bulletin: Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite is vulnerable to multiple vulnerabilities –

https://www.ibm.com/support/pages/node/7290476?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite uses jackson-databind-2.18.9.jar and httpclient5-5.3.1.jar and is vulnerable to CVE-2026-19032, CVE-2026-83557, CVE-2026-68497 and CVE-2026-64607 –

https://www.ibm.com/support/pages/node/7290478?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses nanoid-3.3.12.tgz and dompurify-3.4.12.tgz which are vulnerable to CVE-2026-67213, CVE-2026-67214 and CVE-2026-75838 –

https://www.ibm.com/support/pages/node/7290475?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite uses third party libraries which is vulnerable to multiple cves –

https://www.ibm.com/support/pages/node/7290487?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite is vulnerable to a sensitive information disclosure –

https://www.ibm.com/support/pages/node/7290791?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite uses httpclient5-5.6.3.jar and is vulnerable to CVE-2026-71290 –

https://www.ibm.com/support/pages/node/7290829?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite uses body-parser-1.20.5.tgz which is vulnerable to CVE-2026-12590 –

https://www.ibm.com/support/pages/node/7292659?myns=swgother&mynp=OCSSJ5IPE&mync=E&cm_sp=swgother-_-OCSSJ5IPE-_-E

Security bulletin: Security Bulletin: Security Vulnerability identified in Spring - 6.2.19 used by IBM Maximo Application Suite – MREF –

https://www.ibm.com/support/pages/node/7292668?myns=swgother&mynp=OCSSZBD7&mync=E&cm_sp=swgother-_-OCSSZBD7-_-E

Security bulletin: Security Bulletin: Security Vulnerability identified in reactor-core-3.7.11.jar used by IBM Maximo Application Suite – MREF –

https://www.ibm.com/support/pages/node/7292670?myns=swgother&mynp=OCSSZBD7&mync=E&cm_sp=swgother-_-OCSSZBD7-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite uses freemarker-2.3.30.jar which is vulnerable to CVE-2026-84939 –

https://www.ibm.com/support/pages/node/7293776?myns=swgother&mynp=OCSSJ5IPE&mync=E&cm_sp=swgother-_-OCSSJ5IPE-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite uses mongo-java-driver-3.12.14.jar which is vulnerable to CVE-2026-88033 –

https://www.ibm.com/support/pages/node/7294220?myns=swgother&mynp=OCSSJ5IPE&mync=E&cm_sp=swgother-_-OCSSJ5IPE-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite uses braces-3.0.3.tgz which is vulnerable to CVE-2026-93687 –

https://www.ibm.com/support/pages/node/7294225?myns=swgother&mynp=OCSSJ5IPE&mync=E&cm_sp=swgother-_-OCSSJ5IPE-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite uses jackson-core-2.18.10.jar which is vulnerable to CVE-2026-89407, CVE-2026-89425 –

https://www.ibm.com/support/pages/node/7294228?myns=swgother&mynp=OCSSJ5IPE&mync=E&cm_sp=swgother-_-OCSSJ5IPE-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite uses braces-3.0.3.tgz which is vulnerable to CVE-2026-93687 –

https://www.ibm.com/support/pages/node/7294227?myns=swgother&mynp=OCSSJ5IPE&mync=E&cm_sp=swgother-_-OCSSJ5IPE-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite uses jackson-databind-2.18.10.jar which is vulnerable to CVE-2026-91776, CVE-2026-91777 –

https://www.ibm.com/support/pages/node/7294230?myns=swgother&mynp=OCSSJ5IPE&mync=E&cm_sp=swgother-_-OCSSJ5IPE-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite uses vulnerable software versions of Java and NodeJs which is vulnerable to CVE-2026-70906, CVE-2026-61308, CVE-2026-70907, CVE-2026-60589, CVE-2026-16440, CVE-2026-56846, CVE-2026-56848, CVE-2026-58043 –

https://www.ibm.com/support/pages/node/7294714?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses axios-1.18.1, source-map-js-1.2.1, qs-6.16.0, pymongo-4.17.0, moment-2.30.1, pymongo-4.18.1 and ansible-14.4.0 which are vulnerable to multiple CVE –

https://www.ibm.com/support/pages/node/7294847?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: Security Bulletin: IBM Maximo Application Suite - Location Service for Esri Component uses pymongo-4.18.1 and is vulnerable to CVE-2026-96747, CVE-2026-96748, CVE-2026-96749 –

https://www.ibm.com/support/pages/node/7294846?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite –

https://www.ibm.com/support/pages/node/7295114?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite –

https://www.ibm.com/support/pages/node/7295115?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: There are multiple vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite –

https://www.ibm.com/support/pages/node/7295113?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security bulletin: Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses dependencies which is vulnerable to multiple High severity CVEs –

https://www.ibm.com/support/pages/node/7295120?myns=swgother&mynp=OCSSRHPA&mync=E&cm_sp=swgother-_-OCSSRHPA-_-E

Security updates are only one part of protecting your Maximo environment. If you're planning an upgrade, evaluating your current version, or need guidance on applying the latest security recommendations, Interloc Solutions can help. Our team has extensive experience helping organizations modernize their Maximo environments with minimal disruption, reduced risk, and a clear path forward.

Contact us today to discuss your upgrade strategy and ensure your environment remains secure, supported, and ready for the future.

Untitled design (26)-2

 

About Darlene Nerden

Darlene Nerden is a Maximo Operations and Support Engineer. She has worked with Maximo for over 30 years primarily on the infrastructure and systems side including installs, upgrades, performance tuning, etc. She has worked on a number of teams in the product lifecycle including QA, support, services, operations, etc. Darlene has been a key part of successful implementations and upgrades. She has also been an integral part in end-user acceptance of Maximo with key performance tuning and maintenance strategizes.