VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 4, 2026· Updated Jun 17, 2026

CVE-2026-26002

CVE-2026-26002

Description

Open OnDemand is an open-source high-performance computing portal. The Files application in OnDemand versions prior to 4.0.9 and 4.1.3 is susceptible to malicious input when navigating to a directory. This has been patched in versions 4.0.9 and 4.1.3. Versions below this remain susceptible.

Affected products

3
  • Osc/Open Ondemand2 versions
    cpe:2.3:a:osc:open_ondemand:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:osc:open_ondemand:*:*:*:*:*:*:*:*range: <3.1.16
    • (no CPE)range: <4.0.9, <4.1.3
  • Osc/Ondemandcpe-rescue
    Range: < 4.0.9

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.