CVE-2026-127236 | OpenNMS Group Meridian/Horizon Ad-hoc RRD Graph Feature /graph/graph.png argument injection

November 12, 2026 Yanac

A vulnerability categorized as critical has been discovered in OpenNMS Group Meridian and Horizon. The affected element is an unknown function of the file /graph/graph.png of the component Ad-hoc RRD Graph Feature. Executing a manipulation can lead to argument injection.

This vulnerability is handled as CVE-2026-127236. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More