6 entries matching openstack — updated 2026-11-02 · vulnfeed
| CVE / ID | Title | Severity | CVSS | EPSS | Source | Date |
|---|---|---|---|---|---|---|
| CVE-2026-115642 | In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in poss | HIGH | 8.3 | 44%ile | NVD | 2026-10-30 |
| CVE-2026-94572 | OSSA-2026-039: HAProxy configuration injection leading to remote code execution in Octavia | UNKNOWN | — | 45%ile | OpenStack | 2026-09-21 |
| CVE-2026-71196 | OSSA-2026-038: Multiple SSRF vulnerabilities in Glance web-download and HTTP image APIs | UNKNOWN | — | — | OpenStack | 2026-09-03 |
| CVE-2026-80182 | OSSA-2026-037: Inconsistent scope enforcement for delegated tokens in Keystone | UNKNOWN | — | 47%ile | OpenStack | 2026-08-25 |
| CVE-2026-76878 | OSSA-2026-036: Aodh cross-project alarm enumeration and Watcher webhook authorization bypass | UNKNOWN | — | 46%ile | OpenStack | 2026-08-19 |
| CVE-2026-71193 | OSSA-2026-034: Cross-tenant DNS zone overlap and mDNS DoS via pool scheduling | UNKNOWN | — | 44%ile | OpenStack | 2026-08-11 |