Vulnerabilities

TI-2026-70935 CVE-2026-52903 · GHSA-rwm4-fgr7-vcr6

Unsafe YAML fallback in ManageIQ enables remote code execution

MEDIUM 40

A deserialization of untrusted data vulnerability was found in ManageIQ.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00447 Published 2026-10-12 No fix listed CWE-502

TI-2026-18159 CVE-2026-22598

LOW 31

ManageIQ is an open-source management platform.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00403 Published 2026-01-21 No fix listed CWE-20

TI-2014-00150 CVE-2014-0156 · GHSA-qpqw-mc85-qvm9

MEDIUM 47

Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02918 Published 2022-06-30 Fixed in 1.2.0 CWE-78

TI-2021-12424 CVE-2021-32756

MEDIUM 41

ManageIQ is an open-source management platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01536 Published 2021-07-21 No fix listed CWE-74