OpenNMS Group Horizon

3 known vulnerabilities in OpenNMS Group Horizon, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-89089 CVSS 6.5 medium A SQL injection vulnerability exists in the JasperReports-based reporting feature of multiple versions of OpenNMS Meridian and Horizon. A…
CVE-2026-19596 CVSS 5.9 medium An XML External Entity (XXE) vulnerability exists in the XML collector of multiple versions of OpenNMS Meridian and Horizon. When OpenNMS…
CVE-2026-89054 CVSS 8.2 high A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring Security policy…