Skip to content
Opennebula vulnerabilities
Newest
-
opennebula
Lack of authorisation in OpenNebula by OpenNebula Systems
CVE-2026-84165
8.7 High
-
opennebula
A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 and fixed in v.7.0...
CVE-2025-56537
Public exploit
6.1 Medium
-
opennebula
A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to...
CVE-2025-56536
Public exploit
6.1 Medium
-
opennebula
A cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute...
CVE-2025-56535
Public exploit
6.1 Medium
-
opennebula
A cross-site scripting (XSS) vulnerability in the custom authenticator driver of opennebula v6.10...
CVE-2025-56534
Public exploit
6.1 Medium
-
opennebula
OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a...
CVE-2025-54955
8.1 High
-
opennebula
Unrestricted Upload of File with Dangerous Type vulnerability in OpenNebula OpenNebula core on...
CVE-2022-37426
4.3 Medium
-
opennebula
The FILES directive inside a VM template allows execution of uploaded files when the template is instantiated, resulting in a Remote Code Execution (RCE) attack.
CVE-2022-37425
9.9 Critical
-
opennebula
The FILES Directive allows arbitrary files from the frontend system (including sensitive files) to be included when a VM is started from that template, which may result in Information Disclosure.
CVE-2022-37424
6.5 Medium