CyberSecBulletin

Osnexus vulnerabilities

We track 2 vulnerabilities in Osnexus products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2026.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Osnexus vulnerabilities

  • 9.8 Critical severity

    QuantaStor: Missing Authentication for Critical Functionality

    CVE-2026-18265OsnexusEPSS 1.04%

    OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OSNEXUS QuantaStor. Authentication is not required to exploit this vulnerability. T

  • 9.8 Critical severity

    QuantaStor: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2026-10880Osnexus

    OSNexus QuantaStor SDS Manager is vulnerable to SQL injection in the login endpoint. The username field is not properly sanitized before being incorporated into a SQL query, allowing an unauthenticated remote attacker to bypass authentication and log in as an