Vulnerabilities in The OpenNMS Group
25 resultsCVE-2026-19182MEDIUMOpenNMS v2 Alarm REST API inverted authorization check lets ROLE_REST users acknowledge alarms as any user and bypass read-onlyEPSS 0.3%CVE-2026-111252MEDIUMOpenNMS denial of service via XML entity expansionEPSS 0.2%CVE-2025-53121MEDIUMStored XSS in multiple 33.0.8files in opennms/opennmsEPSS 0.2%CVE-2025-53122MEDIUMSQLi in OpenNMS Horizon and MeridianEPSS 0.2%CVE-2026-127235MEDIUMOpenNMS reflected cross-site scripting in the web UI via request parametersEPSS 0.2%