CVE-2026-22598: Manageiq

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

ManageIQ is an open-source management platform. A flaw was found in the ManageIQ API prior to version radjabov-2 where a malformed TimeProfile could be created causing later UI and API requests to timeout leading to a Denial of Service. Version radjabov-2 contains a patch. One may also apply the patch manually.

Affected products

• Manageiq Manageiq: before radjabov-2 (fixed in radjabov-2)

Published 2026-01-21. Last modified 2026-06-17.