CVE-2026-111252

Multiple versions of OpenNMS Meridian and Horizon are vulnerable to a denial of service (DoS) condition due to insufficient limits on XML entity expansion . An authenticated user with provisioning access can trigger memory exhaustion by submitting a document with a DOCTYPE declaring internal enti...