Security Advisory
CVE-2026-18658
9.8
CRITICAL
Vulnerability Description
IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to SQL injection. An unauthenticated attacker can execute arbitrary SQL statements and leverage database functionality to write a web shell to the application web root, resulting in remote code execution.
Published Date
September 4, 2026
Official Source
NIST NVD Advisory