Known vulnerabilities in OpenStack Ironic
Vendor:
Openstack
Software:
OpenStack Ironic
Software CPE:
cpe:2.3:a:openstack:ironic:*:*:*:*:*:*:*:*
Website:
https://www.openstack.org/
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
38.0.0
26.1.7
37.0.1
35.0.2
32.0.2
29.0.6
37.0.0
36.0.0
26.1.6
29.0.5
32.0.1
35.0.1
35.0.0
34.0.0
33.0.0
32.0.0
31.0.0
30.0.0
29.0.4
29.0.3
29.0.2
29.0.1
29.0.0
28.0.0
27.0.0
26.1.5
26.1.4
26.1.3
26.1.2
26.1.1
24.1.5
24.1.4
24.1.1
23.0.5
23.0.4
21.3.0
21.2.0
21.0.0
20.2.0
20.0.0
19.0.0
18.1.0
18.0.0
17.0.1
16.2.0
16.1.0
15.2.0
15.1.0
14.0.0
12.2.0
12.0.0
11.0.0
10.1.5
7.0.6
6.2.1
24.1.3
23.0.3
21.4.4
26.1.0-3
26.1.0
26.0.0
25.0.0
24.1.2-3
24.1.2
24.1.0
24.0.0
23.1.0
23.0.2-4
23.0.2
23.0.1
23.0.0
22.1.0
22.0.0
21.4.3
21.4.2
21.4.1
21.4.0
21.1.2-4
21.1.2
21.1.1
21.1.0
20.1.3-8
20.1.3
20.1.2
20.1.1
20.1.0
18.3.0-15
18.3.0
18.2.2
18.2.1
18.2.0
17.1.0-21
17.1.0
17.0.4
17.0.3
17.0.2
17.0.0
16.0.5-19
16.0.5
16.0.4
16.0.3
16.0.2
16.0.1
16.0.0
15.0.2-26
15.0.2
15.0.1
15.0.0
13.0.7-30
13.0.7
13.0.6
13.0.5
13.0.4
13.0.3
13.0.2
13.0.1
13.0.0
12.1.6-3
12.1.6
12.1.5
12.1.4
12.1.3
12.1.2
12.1.1
12.1.0
11.1.4-12
11.1.4
11.1.3
11.1.2
11.1.1
11.1.0
10.1.10-11
10.1.10
10.1.9
10.1.8
10.1.7
10.1.6
10.1.4
10.1.3
10.1.2
10.1.1
10.1.0
10.0.0
9.2.0
9.1.7
9.1.6
9.1.5
9.1.4
9.1.3
9.1.2
9.1.1
9.1.0
9.0.1
9.0.0
8.0.0
7.0.7-7
7.0.7
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.3.0
6.2.4
6.2.3
6.2.2
6.2.0
6.1.0
6.0.0
5.1.3
5.1.2
5.1.1
5.1.0
5.0.0
4.3.0
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.0
4.0.0
2015.1.4
2015.1.3
2015.1.2
2015.1.1
2015.1.0
2014.2.1
2014.2
2014.1
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU134857 - Improper Access Control CVE-2026-44917 |
CWE-284 | Low | 26.1.7, 29.0.6, 32.0.2, 35.0.2 | 18.06.2026 |
SB2026061841 SB2026061857 |
||
| #VU134856 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-48681 |
CWE-22 | Low | 26.1.7, 29.0.6, 32.0.2, 35.0.2 | 18.06.2026 |
SB2026061841 SB2026061857 |
||
| #VU134855 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2026-46447 |
CWE-74 | Low | 26.1.7, 29.0.6, 32.0.2, 35.0.2 | 18.06.2026 |
SB2026061841 SB2026061857 |
||
| #VU134851 - Improper Access Control CVE-2026-54421 |
CWE-284 | Low | 29.0.6, 32.0.2, 35.0.2, 37.0.1 | 18.06.2026 |
SB2026061837 |
||
| #VU128242 - Command injection |
CWE-77 | Medium | 26.1.6, 29.0.5, 32.0.1, 35.0.1 | 27.04.2026 |
SB20260427189 |
||
| #VU98123 - Improper Validation of Integrity Check Value CVE-2024-47211 |
CWE-354 | Medium | 21.4.4, 23.0.3, 24.1.3, 26.1.0 | 08.10.2024 |
SB2024100260 SB2024102305 SB2024103012 and 2 more |
||
| #VU97965 - Improper Access Control CVE-2024-44082 |
CWE-284 | Low | 21.4.3, 23.0.2, 24.1.2, 26.1.0 | 02.10.2024 |
SB2024100260 SB2024100261 SB2024100262 and 10 more |