CVE-2026-71491 vulnerabilities

Vulnerabilities for packages: mlflow-fips, openstack-horizon-2026.1-fips, netbox, openstack-horizon-2025.2-fips, datahub-ingestion-fips, label-studio, openstack-placement-2025.1-fips, openstack-horizon-2026.1, openstack-horizon-2025.1, openstack-keystone-2026.1-fips, airflow,...

GHSA-F2FF-P2WW-7P4P vulnerabilities

Vulnerabilities for packages: mlflow-fips, openstack-horizon-2026.1-fips, netbox, openstack-horizon-2025.2-fips, datahub-ingestion-fips, label-studio, openstack-placement-2025.1-fips, openstack-horizon-2026.1, openstack-horizon-2025.1, openstack-keystone-2026.1-fips, airflow,...

CVE-2026-19135

A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...

CVE-2026-19182

An incorrect authorization check in the v2 Alarm REST API in OpenNMS Meridian and Horizon allows a low-privileged authenticated user ROLEREST to acknowledge, escalate, or clear alarms recorded as an arbitrary username, and, when also assigned ROLEREADONLY, to modify alarm state despite the...

EUVD-2026-57719

An incorrect authorization check in the v2 Alarm REST API in OpenNMS Meridian and Horizon allows a low-privileged authenticated user ROLEREST to acknowledge, escalate, or clear alarms recorded as an arbitrary username, and, when also assigned ROLEREADONLY, to modify alarm state despite the...

CVE-2026-19135

A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...

GHSA-H7PC-VWP9-298G vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

CVE-2026-8404 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

CVE-2026-6873 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

GHSA-8CJM-8MP7-R2XF vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

GHSA-923M-GV2P-W5QP vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

CVE-2026-48587 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

CVE-2026-53878 vulnerabilities

Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1-fips, authentik, openstack-horizon-2026.1...

GHSA-CRHF-3PFG-W68W vulnerabilities

Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1-fips, authentik, openstack-horizon-2026.1...

GHSA-3H9F-R86X-QVJX vulnerabilities

Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1-fips, authentik, openstack-horizon-2026.1...

CVE-2026-53877 vulnerabilities

Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1-fips, authentik, openstack-horizon-2026.1...

CVE-2026-48588 vulnerabilities

Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1-fips, authentik, openstack-horizon-2026.1...

GHSA-8QCX-XF44-272X vulnerabilities

Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1-fips, authentik, openstack-horizon-2026.1...

GHSA-G6CJ-PR64-35W5 vulnerabilities

Vulnerabilities for packages: openstack-nova-2026.1, awx, prefect, openstack-kolla-toolbox-2026.1, vllm-openai-cuda-13.0, vast-csi, openstack-glance-2026.1, apache-beam-python-3.12-sdk, barman, py3-cassandra-medusa, openstack-tempest-2026.1, openstack-kolla-toolbox-2025.2, kubeflow-volumes-web-ap...

CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: openstack-nova-2026.1, awx, prefect, openstack-kolla-toolbox-2026.1, vllm-openai-cuda-13.0, vast-csi, openstack-glance-2026.1, apache-beam-python-3.12-sdk, barman, py3-cassandra-medusa, openstack-tempest-2026.1, openstack-kolla-toolbox-2025.2, kubeflow-volumes-web-ap...