Osc Open Ondemand — known CVE vulnerabilities

Every CVE whose affected-product data names Osc Open Ondemand, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-26002 — CVSS 9.8 (critical): Open OnDemand is an open-source high-performance computing portal. The Files application in OnDemand versions prior to 4.0.9 and 4.1.3 is…
• CVE-2020-36247 — CVSS 8.8 (high): Open OnDemand before 1.5.7 and 1.6.x before 1.6.22 allows CSRF.
• CVE-2025-66029 — CVSS 7.6 (high): Open OnDemand provides remote web access to supercomputers. In versions 4.0.8 and prior, the Apache proxy allows sensitive headers to be…