<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: the-opennms-group-meridian</title><description>Every new CVE for the-opennms-group-meridian.</description><link>https://agentprime.io/</link><item><title>CVE-2026-111252: OpenNMS denial of service via XML entity expansion</title><link>https://agentprime.io/advisories/CVE-2026-111252/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-111252/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 Oct 2026 18:56:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-111235: OpenNMS REST authorization bypass via non-canonical HTTP method</title><link>https://agentprime.io/advisories/CVE-2026-111235/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-111235/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 Oct 2026 18:45:06 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-89089: OpenNMS SQL injection in shipped Asset Management JasperReports via the DATE_FORMAT parameter (ROLE_USER)</title><link>https://agentprime.io/advisories/CVE-2026-89089/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-89089/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Sep 2026 20:30:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-19596: OpenNMS XML collector XXE allows arbitrary file read from the OpenNMS host</title><link>https://agentprime.io/advisories/CVE-2026-19596/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-19596/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Sep 2026 20:08:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-19182: OpenNMS v2 Alarm REST API inverted authorization check lets ROLE_REST users acknowledge alarms as any user and bypass read-only</title><link>https://agentprime.io/advisories/CVE-2026-19182/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-19182/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Aug 2026 04:50:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-19135: OpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE_USER to load arbitrary classes</title><link>https://agentprime.io/advisories/CVE-2026-19135/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-19135/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Aug 2026 04:47:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53122: SQLi in OpenNMS Horizon and Meridian</title><link>https://agentprime.io/advisories/CVE-2025-53122/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53122/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Jun 2025 19:49:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53121: Stored XSS in multiple 33.0.8files in opennms/opennms</title><link>https://agentprime.io/advisories/CVE-2025-53121/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53121/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Jun 2025 18:51:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-40612: Authenticated XXE Injection Via The File Editor</title><link>https://agentprime.io/advisories/CVE-2023-40612/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-40612/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Aug 2023 18:22:49 GMT</pubDate><category>CVE</category></item></channel></rss>