MEDIUM 5.3 NVD

CVE-2026-71568

In BMCtest, Ironic is started without authentication and TLS for the duration of the test. Exploiting the problem requires winning the race with bmctest itself,

In BMCtest, Ironic is started without authentication and TLS for the duration of the test. Exploiting the problem requires winning the race with bmctest itself, which reduces the attack window and significantly increases its complexity.

References

https://github.com/openshift-metal3/bmctest/security/advisories/GHSA-53vv-qh77-2hqh

Published: 2026-09-17 · Source: NVD · Feed updated: 2026-09-17

This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-09-17 via NVD.

vulnfeed aggregates 12865 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.