Known vulnerabilities in OpenStack Blazar
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-93854 | In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete… | 7.2 High | Sep 18, 2026 |
| CVE-2026-93852 | In OpenStack Blazar before 17.0.1, the V2 lease listing operation (GET /v2/leases) returns leases for every project… | 7.1 High | Sep 18, 2026 |