What is GHSA-pqx8-h6gr-6xwr?

GHSA-pqx8-h6gr-6xwr is a security advisory published by GitHub Security Advisories with Critical severity. IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0...

Which CVE IDs does GHSA-pqx8-h6gr-6xwr cover?

GHSA-pqx8-h6gr-6xwr covers the following CVE IDs: CVE-2026-18658. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pqx8-h6gr-6xwr?

GHSA-pqx8-h6gr-6xwr has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-pqx8-h6gr-6xwrCriticalCVSS 9.8

IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0...

Vendor

GitHub Security Advisories

Published

September 4, 2026

Last Modified

September 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-18658 →

📋 Description

IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to SQL injection. An unauthenticated attacker can execute arbitrary SQL statements and leverage database functionality to write a web shell to the application web root, resulting in remote code execution.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-18658
https://www.ibm.com/support/pages/node/7286196
https://github.com/advisories/GHSA-pqx8-h6gr-6xwr