Openstack vulnerabilities

Products

• Keystone 58
• Horizon 48
• Nova 40
• Neutron 29
• Folsom 25
• Ironic 19
• Swift 19
• Glance 16
• Essex 15
• Image Registry And Delivery Service \(glance\) 15
• Grizzly 14
• Compute 12
• Havana 11
• Cinder 10
• Heat 7
• Python-keystoneclient 7
• Barbican 5
• Keystonemiddleware 5
• Mistral 5
• Octavia 5
• Tripleo Heat Templates 5
• Designate 4
• Icehouse 4
• Manila 3
• Openstack 3
• Trove 3
• Zaqar 3
• Blazar 2
• Ceilometer 2
• Cloud Magnum Orchestration 2
• Cyborg 2
• Diablo 2
• Ironic Python Agent 2
• Keystone Essex 2
• Magnum 2
• Murano 2
• Oslo 2
• Tripleo Ansible 2

Newest

• openstack keystonemiddleware In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a... CVE-2026-115642 Fix available 8.3 HighOctober 30, 2026
• openstack ironic OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete... CVE-2026-90458 Fix available 5.4 MediumOctober 23, 2026
• openstack ironic OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a... CVE-2026-89419 Fix available 5.0 MediumOctober 23, 2026
• openstack ironic OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a... CVE-2026-115638 4.3 MediumOctober 23, 2026
• openstack cinder In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the... CVE-2026-93856 Fix available 4.3 MediumOctober 21, 2026
• openstack manila In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify... CVE-2026-71195 Fix available 9.9 CriticalOctober 21, 2026
• openstack horizon, the opennms group meridian +1 more OpenNMS denial of service via XML entity expansion CVE-2026-111252 6.5 MediumOctober 15, 2026
• openstack horizon, the opennms group meridian +1 more OpenNMS REST authorization bypass via non-canonical HTTP method CVE-2026-111235 9.1 CriticalOctober 15, 2026
• openstack mistral In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object... CVE-2026-97147 Fix available 7.2 HighOctober 8, 2026
• openstack mistral In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted... CVE-2026-93861 Fix available 6.0 MediumOctober 8, 2026
• openstack mistral In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request... CVE-2026-93860 Fix available 7.1 HighOctober 8, 2026
• openstack mistral In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied... CVE-2026-93858 Fix available 8.7 HighOctober 8, 2026
• openstack zaqar In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project identifier in... CVE-2026-107363 Fix available 6.1 MediumOctober 7, 2026
• openstack zaqar In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending... CVE-2026-97404 Fix available 9.2 CriticalSeptember 24, 2026
• openstack swift In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header... CVE-2026-97149 Fix available 5.3 MediumSeptember 24, 2026
• openstack octavia In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and... CVE-2026-94572 Fix available 9.4 CriticalSeptember 21, 2026
• openstack octavia In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters... CVE-2026-94571 Fix available 9.4 CriticalSeptember 21, 2026
• openstack blazar In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization... CVE-2026-93854 Fix available 7.2 HighSeptember 18, 2026
• openstack blazar In OpenStack Blazar before 17.0.1, the V2 lease listing operation (GET /v2/leases) returns leases... CVE-2026-93852 Fix available 7.1 HighSeptember 18, 2026
• openstack glance In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when... CVE-2026-71198 Fix available 7.0 HighSeptember 14, 2026
• openstack ironic OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host... CVE-2026-90461 Fix available 6.3 MediumSeptember 11, 2026
• openstack keystone An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated... CVE-2026-90460 Fix available 7.6 HighSeptember 11, 2026
• openstack horizon, the opennms group meridian +1 more OpenNMS SQL injection in shipped Asset Management JasperReports via the DATE_FORMAT parameter (ROLE_USER) CVE-2026-89089 6.5 MediumSeptember 10, 2026
• openstack horizon, the opennms group meridian +1 more OpenNMS XML collector XXE allows arbitrary file read from the OpenNMS host CVE-2026-19596 5.9 MediumSeptember 10, 2026
• openstack horizon OpenNMS missing authorization on /api/v2 PATCH endpoints allows unauthenticated configuration changes CVE-2026-89054 8.2 HighSeptember 10, 2026
• openstack keystone In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project... CVE-2026-80183 Fix available 7.1 HighAugust 26, 2026
• openstack keystone In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms ... CVE-2026-80184 Fix available 7.6 HighAugust 25, 2026
• openstack keystone In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application... CVE-2026-80182 Fix available 7.6 HighAugust 25, 2026
• keystonejs keystone Keystone: `graphql.maxTake` bypass with negative `take` CVE-2026-63421 Fix available 7.5 HighAugust 21, 2026
• openstack glance In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass... CVE-2026-77648 Fix available 2.2 LowAugust 20, 2026
• openstack aodh In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the... CVE-2026-76878 Fix available 8.4 HighAugust 19, 2026
• openstack ironic In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning... CVE-2026-74250 Fix available 6.3 MediumAugust 14, 2026
• openstack octavia OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By... CVE-2026-74248 Fix available 4.3 MediumAugust 14, 2026
• openstack horizon, the opennms group meridian +1 more OpenNMS v2 Alarm REST API inverted authorization check lets ROLE_REST users acknowledge alarms as any user and bypass read-only CVE-2026-19182 4.3 MediumAugust 13, 2026
• openstack horizon, the opennms group meridian +1 more OpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE_USER to load arbitrary classes CVE-2026-19135 5.4 MediumAugust 13, 2026
• openstack designate In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving... CVE-2026-71194 Fix available 6.8 MediumAugust 12, 2026
• openstack designate In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the... CVE-2026-71193 Fix available 9.6 CriticalAugust 12, 2026
• openstack ironic In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can... CVE-2026-71201 Fix available 5.0 MediumAugust 5, 2026
• openstack swift In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control... CVE-2026-71192 Fix available 6.0 MediumAugust 5, 2026
• openstack swift In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-*... CVE-2026-71191 Fix available 6.0 MediumAugust 5, 2026
• openstack swift In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular... CVE-2026-71190 Fix available 8.7 HighAugust 5, 2026
• openstack neutron In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of... CVE-2026-55707 Fix available 7.1 HighAugust 5, 2026
• openstack zaqar OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID... CVE-2026-66139 Fix available 4.8 MediumJuly 24, 2026
• openstack ironic python agent In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can... CVE-2026-66138 Fix available 7.2 HighJuly 24, 2026
• openstack ironic python agent In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using... CVE-2026-54422 Fix available 5.5 MediumJuly 24, 2026
• glanceapp glance Glance 0.8.5 IP Spoofing Authentication Brute-Force Protection Bypass CVE-2026-63770 8.2 HighJuly 20, 2026
• openstack ironic In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI... CVE-2026-54423 Fix available 8.2 HighJuly 10, 2026
• openstack ironic OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project... CVE-2026-44918 Fix available 5.5 MediumJuly 10, 2026
• openstack swift OpenStack Swift vulnerable to authenticated server-side request forgery CVE-2026-50221 Fix available 5.3 MediumJune 23, 2026
• openstack horizon OpenStack Horizon RC file generation does not escape special characters in project names CVE-2026-55748 Fix available 6.0 MediumJune 17, 2026
• Show olderLoading…