CyberSecBulletin

ManageIQ vulnerabilities

We track 2 vulnerabilities in ManageIQ products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2026.

2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score

Latest ManageIQ vulnerabilities

  • 8.8 High severity

    ManageIQ: Deserialization of Untrusted Data

    CVE-2026-52903ManageIQ

    A deserialization of untrusted data vulnerability was found in ManageIQ. The YamlLoadAliases module overrides YAML.safe_load to silently fall back to YAML.unsafe_load in production when a Psych::DisallowedClass error occurs. An authenticated attacker with dial

  • 7.1 High severity

    ManageIQ is an open-source management platform.

    CVE-2026-22598ManageIQ

    ManageIQ is an open-source management platform. A flaw was found in the ManageIQ API prior to version radjabov-2 where a malformed TimeProfile could be created causing later UI and API requests to timeout leading to a Denial of Service. Version radjabov-2 cont