CRITICAL 9.8 NVD

CVE-2026-18658

IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to SQL injection. An unauthenticated attacke

IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to SQL injection. An unauthenticated attacker can execute arbitrary SQL statements and leverage database functionality to write a web shell to the application web root, resulting in remote code execution.

References

https://www.ibm.com/support/pages/node/7286196

Published: 2026-09-04 · Source: NVD · Feed updated: 2026-09-04

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-09-04 via NVD.

Risk Timeline

CVE Disclosed2026-09-04 · -1 days ago

Remediation Resources

Analysis & PoC

www.ibm.com/support/pages/node/7286196

vulnfeed aggregates 10236 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.