Meridian — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Meridian, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-89089	OpenNMS SQL injection in shipped Asset Management JasperReports via the DATE_FORMAT parameter (ROLE_USER) CWE-89	6.5	Medium	2026-09-10
CVE-2026-19596	OpenNMS XML collector XXE allows arbitrary file read from the OpenNMS host CWE-611	5.9	Medium	2026-09-10
CVE-2026-19182	OpenNMS v2 Alarm REST API inverted authorization check lets ROLE_REST users acknowledge alarms as any user and bypass read-only CWE-863	4.3	Medium	2026-08-13
CVE-2026-19135	OpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE_USER to load arbitrary classes CWE-470	5.4	Medium	2026-08-13
CVE-2023-0870	Form Can Be Manipulated with Cross-Site Request Forgery (CSRF) CWE-352	8.1	High	2023-03-22
CVE-2023-0815	Plaintext Password Present in the Web logs CWE-532	6.8	Medium	2023-02-23
CVE-2023-0867	Multiple stored and reflected Cross-site Scripting in webapp CWE-79	6.7	Medium	2023-02-23
CVE-2023-0868	Stealing Cookies using Reflected XSS via graph results CWE-20	6.7	Medium	2023-02-23
CVE-2023-0869	Cross-site scripting in outage/list.htm CWE-20	5.8	Medium	2023-02-23

All 9 known CVE vulnerabilities affecting Meridian with full Chinese analysis, references, and POCs where available.