Improper input validation in Manageiq
CVE-2026-22598
ManageIQ is an open-source management platform. A flaw was found in the ManageIQ API prior to version radjabov-2 where a malformed TimeProfile could be created causing later UI and API requests to timeout leading to a Denial of Service. Version radjabov-2 contains a patch. One may also apply the patch manually.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.003 (26.4th percentile) — read the EPSS interpretation.
Affected products
- Manageiq — versions < radjabov-2
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)