CVE-2026-22598 HIGH

CVE-2026-22598: ManageIQ vulnerable to DoS Attack when creating TimeProfiles

Vendor Manageiq
Product manageiq
Weakness CWE-20 · Input validation
Published January 21, 2026
Last update January 21, 2026
View on NVD All CVEs

CVSS base score

7.1/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

ManageIQ is an open-source management platform. A flaw was found in the ManageIQ API prior to version radjabov-2 where a malformed TimeProfile could be created causing later UI and API requests to timeout leading to a Denial of Service. Version radjabov-2 contains a patch. One may also apply the patch manually.

Key dates

02Disclosure timeline

January 21, 2026 CVE published
January 21, 2026 Record updated