Vulnerabilities

TI-2026-74979 CVE-2026-111252

Denial of service in OpenNMS Meridian and Horizon via XML entities

LOW 28

A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00249 Published 2026-10-15 Fixed in 2024.3.14, 2025.0.11 +2 CWE-400

TI-2026-74978 CVE-2026-111235

MEDIUM 47

An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00376 Published 2026-10-15 Fixed in 2024.3.14, 2025.0.11 +2 CWE-204