ZeroDay Findings
Sign inSign up

Findings

CVE-2025-56537

A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 and fixed in v.7.0 allows attackers to execute arbitrary web scripts or HTML via injecting a…

Published Apr 29, 2026 · updated Oct 15, 2026 · opennebula opennebula

A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 and fixed in v.7.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the virtual network template parameter.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 29, 2026 · NIST NVD

    Detected

    A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 and fixed in v.7.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the virtual network template parameter.

  2. Oct 15, 2026 · NIST NVD

    Updated

    A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 and fixed in v.7.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the virtual network template parameter.

Affected

  • cpe opennebula/opennebulaversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2025-56537

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-56537

    A stored cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 and fixed in v.7.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the virtual network template parameter.

    nvd.nist.gov

References