Known vulnerabilities in Red Hat OpenStack

Vendor: Red Hat Inc.
Software: Red Hat OpenStack
Software CPE: cpe:2.3:a:red_hat:red_hat_openstack:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 407
Public exploits: 29
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenStack Red Hat OpenStack is affected by 407 known vulnerabilities: 1 critical, 59 high, 203 medium, 144 low Critical High Medium Low

Vulnerabilities (407)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-32282		 CWE-367 Low
No
No
 17.1 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 51 more
#VU140605 - Improper Certificate Validation
CVE-2026-33810		 CWE-295 Medium
No
No
 17.1 31.07.2026 SB2026073125
SB2026073183
SB2026073184
and 13 more
#VU140599 - Resource exhaustion
CVE-2026-32280		 CWE-400 Medium
No
No
 17.1 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 75 more
#VU136680 - Dependency on Vulnerable Third-Party Component
CVE-2026-32283		 CWE-1395 Medium
No
No
 17.1 02.07.2026 SB2026070218
SB2026070239
SB2026070240
and 63 more
#VU130102 - Improper Access Control
CVE-2026-33413		 CWE-284 Medium
No
No
 17.1 05.05.2026 SB2026050599
SB20260731108
#VU128730 - Improper Authorization
CVE-2026-33186		 CWE-285 High
No
No
 17.1 01.05.2026 SB2026050106
SB2026050107
SB2026050108
and 70 more
#VU125222 - Improper Access Control
CVE-2026-33551		 CWE-284 Low
No
No
 17.1 08.04.2026 SB2026040848
SB2026062267
#VU124115 - Improper Authorization
CVE-2026-27137		 CWE-285 Medium
No
No
 17.1 19.03.2026 SB2026031903
SB2026031905
SB2026032422
and 10 more
#VU124118 - Improper input validation
CVE-2026-25679		 CWE-20 Medium
No
No
 17.1 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 136 more
#VU124034 - Resource exhaustion
CVE-2025-61726		 CWE-400 Medium
No
No
 17.1 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 145 more
#VU123129 - Improper Certificate Validation
CVE-2025-68121		 CWE-295 High
No
No
 17.1 23.02.2026 SB2026022333
SB2026030334
SB2026030343
and 118 more
#VU122995 - Allocation of Resources Without Limits or Throttling
CVE-2026-24708		 CWE-770 Low
No
No
 17.1 17.02.2026 SB2026021762
SB2026021847
SB2026022004
and 2 more
#VU122270 - Resource exhaustion
CVE-2026-23490		 CWE-400 Medium
No
No
 17.1 03.02.2026 SB2026020365
SB2026020366
SB2026020370
and 53 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 17.1 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 90 more
#VU119235 - Resource exhaustion
CVE-2025-61729		 CWE-400 Medium
No
No
 17.1 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 147 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 17.1 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 89 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 17.1 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 94 more
#VU118717 - Improper input validation
CVE-2025-47913		 CWE-20 Low
No
No
 17.1.12 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 55 more
#VU118141 - Incorrect Default Permissions
CVE-2024-25621		 CWE-276 Low
No
No
 17.1.12 06.11.2025 SB2025110610
SB2025111276
SB2025112826
and 17 more
#VU118095 - Incorrect Authorization
CVE-2025-65073		 CWE-863 Critical
No
No
 17.1 05.11.2025 SB2025110502
SB2025110503
SB2025121606
and 2 more


Showing elements 1 - 20 out of 407