Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: The OpenNMS Group Horizon, Meridian 2024.3.12, 2025.0.9, 36.0.3 Clear all filters
TI-2026-15665 CVE-2026-19182 · GHSA-r53w-fffc-9ppv

Incorrect authorization in OpenNMS Group Meridian

Priority LOW 20

An incorrect authorization check in the v2 Alarm REST API in OpenNMS Meridian and Horizon allows a low-privileged authenticated user (ROLE_REST) to acknowledge, escalate, or clear alarms recorded as an arbitrary username…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00254 Published 2026-08-13 Fixed in 2024.3.12, 2025.0.9 +1 CWE-863