Open Xdmod vulnerabilities

2 known vulnerabilities in Open Xdmod from Buffalo. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  xdmod: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-45779Jun 5, 2026Ubccr

  OpenXDMoD is an open framework for collecting and analyzing HPC metrics. An SQL injection vulnerability exists in Open XDMoD versions prior to 10.0.3 that allows an unauthenticated remote attacker to execute arbitrary SQL statements. Exploitation requires no a

• 9.8 Critical severity

  xdmod: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-45777Jun 5, 2026Ubccr

  OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Starting in version 9.5.0 and prior to version 11.0.3, an attacker can remotely execute arbitrary system commands on the web server hosting Open XDMoD with the privileges of the web serve