CVE-2026-18658
CRITICAL
NVD
CVSS Score
9.8
Severity
CRITICAL
Published
Sep 04, 2026
Vendor
unknown
Description
IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to SQL injection. An unauthenticated attacker can execute arbitrary SQL statements and leverage database functionality to write a web shell to the application web root, resulting in remote code execution.