Demander un audit

Retour à la veille

CVE-2026-44918

Publié : 10 juillet 2026

Modifié : 10 juillet 2026

Lien officiel NVD

Score CVSS

5.5

MEDIUM

Description détaillée

OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

Références et Patchs

https://bugs.launchpad.net/ironic/+bug/2150450 https://lists.openstack.org/archives/list/openstack-announce@lists.openstack.org/thread/PAJKDWS23MKSSNX22JEVDA7RWN3BHJYC/https://security.openstack.org/ossa/OSSA-2026-026.html https://www.openwall.com/lists/oss-security/2026/07/08/4 http://www.openwall.com/lists/oss-security/2026/07/08/4

Dernières Vulnérabilités

CVE-2026-21057

Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write out-of-bounds memory.

CVE-2026-21056

Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.

CVE-2026-21055

Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby privilege.