PatchSiren

OpenNebula CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM OpenNebula CVE published 2026-04-29

CVE-2025-56536

A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the user information parameter. The CVSS score is 6.1, indicating a medium severity vulnerability. This vulnerability can be exploited by attackers to inject malicious scripts or HTML into user information parameters, potentially leading t [truncated]

MEDIUM OpenNebula CVE published 2026-04-29

CVE-2025-56535

A cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the zone attribute parameter. The CVE record was published on 2026-04-29T16:16:21.610Z and has not been modified since then. This vulnerability affects OpenNebula deployments, and defenders responsible for these deployments should assess the pote [truncated]