CVE record · 1 source
CVE-2026-111235
CVSS 9.1An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon.
- Vendor
- Canonical
- Product
- canonical
- CVSS
- 9.1
- EPSS
- 0.004 (p32)
- Exposure class
- Developer platform, Network management
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon.
An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/** Spring Security filter chains authorize requests with intercept-url rules that name the HTTP method…