CVE-2026-22598: ManageIQ vulnerable to DoS Attack when creating TimeProfiles
ManageIQ is an open-source management platform. A flaw was found in the ManageIQ API prior to version radjabov-2 where a malformed TimeProfile could be created causing later UI and API requests to timeout leading to a Denial of Service. Version radjabov-2 contains a patch. One may also apply the patch manually.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22598?
CVE-2026-22598 is classified as a Denial of Service (DoS) vulnerability in ManageIQ.
How do I fix CVE-2026-22598?
To fix CVE-2026-22598, update your ManageIQ API to a version later than radjabov-2.
What impact does CVE-2026-22598 have on ManageIQ?
CVE-2026-22598 allows an attacker to create a malformed TimeProfile, causing subsequent UI and API requests to timeout.
What versions of ManageIQ are affected by CVE-2026-22598?
ManageIQ versions prior to radjabov-2 are affected by CVE-2026-22598.
Is there a workaround for CVE-2026-22598?
The primary mitigation for CVE-2026-22598 is to upgrade to the latest version of ManageIQ, as no specific workaround is provided.