OOSC

Products

Exploited and recent CVEs

• CVE-2026-44371 Medium 5.3 Open OnDemand: Specially crafted filenames can execute javascript in the file browser 0.3%
• CVE-2026-26002 Medium 6.3 OnDemand susceptible to malicious input when navigating to a directory. 0.6%
• CVE-2025-66029 High 7.6 Open OnDemand affected by Apache proxy passing sensitive headers 0.2%
• CVE-2025-64185 Medium 6.9 Open OnDemand RPM packages create world writable locations 0.3%
• CVE-2025-62724 Medium 4.3 Open OnDemand allowlist bypass using symlinks in directory downloads (TOCTOU) 0.2%
• CVE-2025-58435 Medium 4.1 Open OnDemand didn't rotate password for VNC batch_connect 0.3%
• CVE-2025-53636 Medium 5.4 Open OnDemand Shell App closed websocket DoS 0.3%