Vulnerabilities of OpenStack Zaqar
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-107363 | In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project identifier in subsequent requests to… | 6.1 Medium | Oct 7, 2026 |
| CVE-2026-97404 | In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header | 9.2 Critical | Sep 24, 2026 |
| CVE-2026-66139 | OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known | 4.8 Medium | Jul 24, 2026 |