en Se connecter

5.5 Moyenne

CVE-2026-44918 OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization

Description

OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Ironic 36.0	36.0.0 → < 37.0.1	37.0.1
Ironic 33.0	33.0.0 → < 35.0.2	35.0.2
Ironic 30.0	30.0.0 → < 32.0.2	32.0.2
Ironic 27.0	27.0.0 → < 29.0.6	29.0.6

Références

bugs.launchpad.net bugs.launchpad.net
security.openstack.org security.openstack.org
lists.openstack.org lists.openstack.org
www.openwall.com www.openwall.com

Chronologie

Publiée 10 juillet 2026
Dernière modification 10 juillet 2026

Les 18 CVE de Ironic →

CVE-2026-90458 OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's… 5.4 Moyenne CVE-2026-89419 OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to… 5.0 Moyenne CVE-2026-115638 OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of… 4.3 Moyenne CVE-2026-90461 OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is… 6.3 Moyenne

Suivre cette CVE