Known vulnerabilities in Red Hat OpenStack

Vendor: Red Hat Inc.
Software: Red Hat OpenStack
Software CPE: cpe:2.3:a:red_hat:red_hat_openstack:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 406
Public exploits: 29
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenStack Red Hat OpenStack is affected by 406 known vulnerabilities: 1 critical, 59 high, 203 medium, 143 low Critical High Medium Low

Vulnerabilities (406)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-32282		 CWE-367 Low
No
No
 17.1 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 50 more
#VU140605 - Improper Certificate Validation
CVE-2026-33810		 CWE-295 Medium
No
No
 17.1 31.07.2026 SB2026073125
SB2026073183
SB2026073184
and 7 more
#VU140599 - Resource exhaustion
CVE-2026-32280		 CWE-400 Medium
No
No
 17.1 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 70 more
#VU136680 - Dependency on Vulnerable Third-Party Component
CVE-2026-32283		 CWE-1395 Medium
No
No
 17.1 02.07.2026 SB2026070218
SB2026070239
SB2026070240
and 61 more
#VU130102 - Improper Access Control
CVE-2026-33413		 CWE-284 Medium
No
No
 17.1 05.05.2026 SB2026050599
SB20260731108
#VU128730 - Improper Authorization
CVE-2026-33186		 CWE-285 High
No
No
 17.1 01.05.2026 SB2026050106
SB2026050107
SB2026050108
and 69 more
#VU125222 - Improper Access Control
CVE-2026-33551		 CWE-284 Low
No
No
 17.1 08.04.2026 SB2026040848
SB2026062267
#VU124115 - Improper Authorization
CVE-2026-27137		 CWE-285 Medium
No
No
 17.1 19.03.2026 SB2026031903
SB2026031905
SB2026032422
and 9 more
#VU124118 - Improper input validation
CVE-2026-25679		 CWE-20 Medium
No
No
 17.1 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 134 more
#VU124034 - Resource exhaustion
CVE-2025-61726		 CWE-400 Medium
No
No
 17.1 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 143 more
#VU123129 - Improper Certificate Validation
CVE-2025-68121		 CWE-295 High
No
No
 17.1 23.02.2026 SB2026022333
SB2026030334
SB2026030343
and 116 more
#VU122270 - Resource exhaustion
CVE-2026-23490		 CWE-400 Medium
No
No
 17.1 03.02.2026 SB2026020365
SB2026020366
SB2026020370
and 52 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 17.1 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 89 more
#VU119235 - Resource exhaustion
CVE-2025-61729		 CWE-400 Medium
No
No
 17.1 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 146 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 17.1 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 88 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 17.1 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more
#VU118717 - Improper input validation
CVE-2025-47913		 CWE-20 Low
No
No
 17.1.12 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 53 more
#VU118141 - Incorrect Default Permissions
CVE-2024-25621		 CWE-276 Low
No
No
 17.1.12 06.11.2025 SB2025110610
SB2025111276
SB2025112826
and 17 more
#VU118095 - Incorrect Authorization
CVE-2025-65073		 CWE-863 Critical
No
No
 17.1 05.11.2025 SB2025110502
SB2025110503
SB2025121606
and 2 more
#VU117948 - Stack-based buffer overflow
CVE-2025-11678		 CWE-121 High
No
No
 17.1 03.11.2025 SB2025110358
SB2025110362
SB2025120969
and 1 more


Showing elements 1 - 20 out of 406