PT-2026-40947 · Unknown · Open Ondemand

Iratechiapet · CVE-2026-44371 · Published 2026-05-14 · Updated 2026-05-14

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions Open OnDemand versions prior to 4.0.11 Open OnDemand versions prior to 4.1.5 Open OnDemand versions prior to 4.2.2

Description Specially crafted filenames can lead to the execution of arbitrary JavaScript within the file browser of this high-performance computing portal.

Recommendations Update to version 4.0.11. Update to version 4.1.5. Update to version 4.2.2.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-44371

GHSA-XCV4-M435-M33H

Affected Products

Open Ondemand

References · 4

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44371.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-44371 · Security Note
• https://osv.dev/vulnerability/CVE-2026-44371 · Vendor Advisory
• https://github.com/OSC/ondemand/security/advisories/GHSA-xcv4-m435-m33h · Note