CVE-2026-18658

Name of the Vulnerable Software and Affected Versions IBM Operational Decision Manager version 8.11.0.1 IBM Operational Decision Manager version 8.11.1.0 IBM Operational Decision Manager version 8.12.0.1 IBM Operational Decision Manager version 9.0.0.1 IBM Operational Decision Manager version 9.5.0.0 IBM Operational Decision Manager version 9.5.0.1 IBM Operational Decision Manager version 9.6.0.0

Description An unauthenticated attacker can perform a SQL injection, which allows the execution of arbitrary SQL statements. By leveraging database functionality, the attacker can write a web shell to the application web root, leading to remote code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.