Denial of Service Vulnerability in ManageIQ API Affecting Open-Source Platform
CVE-2026-22598

7.1HIGH

Key Information:

Vendor

Manageiq

Status
Vendor
CVE Published:
21 January 2026

What is CVE-2026-22598?

A vulnerability within the ManageIQ API allows for the creation of a malformed TimeProfile, which can result in subsequent UI and API requests timing out. This behavior can lead to a Denial of Service condition, effectively disrupting the normal functioning of the affected application. Fortunately, version radjabov-2 has addressed this issue with a patch, and users can also apply the patch manually to secure their systems.

Affected Version(s)

manageiq < radjabov-2

References

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.