IBM Maximo Asset Management DoS Vulnerability - CVSS 5.3

CERT-Bund released advisory WID-SEC-2026-0965 alerting organizations to a DoS vulnerability in IBM Maximo Asset Management. The flaw allows remote anonymous attackers to conduct denial of service attacks without requiring authentication or user interaction. Affected systems span Linux, UNIX, and Windows environments. IBM has released patch version 7.6.1.3 IF037 as remediation.

Organizations operating IBM Maximo Asset Management should treat this as a priority security update. While the CVSS score indicates medium severity, the low attack complexity and potential for remote exploitation without credentials warrants immediate patching. Enterprises in manufacturing, logistics, energy, and critical infrastructure sectors that rely on Maximo for asset and supply chain management face operational disruption risk from successful DoS attacks. CERT-Bund recommends applying the security update and implementing network-level access restrictions as mitigation measures.