| CVE-2026-90460 |
An issue was discovered in OpenStack Keystone before 29.0.3
|
7.6
High
|
Sep 11, 2026 |
| CVE-2026-80183 |
In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every…
|
7.1
High
|
Aug 26, 2026 |
| CVE-2026-80184 |
In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms (OAuth1 access tokens,…
|
7.6
High
|
Aug 25, 2026 |
| CVE-2026-80182 |
In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped…
|
7.6
High
|
Aug 25, 2026 |
| CVE-2026-42998 |
An issue was discovered in OpenStack Keystone before 29.0.2
|
6.0
Medium
|
May 28, 2026 |
| CVE-2026-42999 |
An issue was discovered in OpenStack Keystone before 29.0.2
|
6.0
Medium
|
May 28, 2026 |
| CVE-2026-43000 |
An issue was discovered in OpenStack Keystone before 29.0.2
|
6.0
Medium
|
May 28, 2026 |
| CVE-2026-44394 |
An issue was discovered in OpenStack Keystone before 29.0.2
|
6.0
Medium
|
May 28, 2026 |
| CVE-2026-43001 |
An issue was discovered in OpenStack Keystone before 29.0.2
|
7.9
High
|
May 1, 2026 |
| CVE-2026-40683 |
In OpenStack Keystone before 28.0.1, the LDAP identity backend does not convert the user enabled attribute to a…
|
7.7
High
|
Apr 14, 2026 |
| CVE-2026-33551 |
An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0
|
3.5
Low
|
Apr 10, 2026 |
| CVE-2025-65073 |
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS…
|
7.5
High
|
Nov 17, 2025 |
| CVE-2013-2255 |
HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail…
|
Not rated
|
Nov 1, 2019 |