Lucene search
+L

66 matches found

PyPA
PyPA
•added 2026/07/23 11:41 a.m.•40 views

OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials...

9.9CVSS5.5AI score0.00915EPSS
SaveExploits0References11Affected Software1
OSV
OSV
•added 2026/07/23 11:41 a.m.•18 views

PYSEC-2026-3486 OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials...

9.9CVSS5.6AI score0.00915EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•20 views

PT-2026-64096

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials...

9.9CVSS5.7AI score0.00915EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
•added 2026/06/12 2:28 a.m.•15 views

SUSE CVE-2026-41283

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials...

9.9CVSS5.6AI score0.00915EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/06/10 2:20 p.m.•20 views

CVE-2026-41283

A flaw was found in OpenStack Mistral. When the API is exposed, a remote attacker can exploit certain endpoints to achieve arbitrary code execution. This allows the attacker to run malicious code on the system and potentially exfiltrate sensitive service credentials. Mitigation Restrict network...

9.9CVSS5.9AI score0.00915EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/06/04 6:30 a.m.•11 views

OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials...

9.9CVSS6.2AI score0.00915EPSS
SaveExploits0References9Affected Software1
OSV
OSV
•added 2026/06/04 6:30 a.m.•11 views

GHSA-9HFW-W3F4-C4P8 OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials...

9.9CVSS6.2AI score0.00915EPSS
SaveExploits0References9
NVD
NVD
•added 2026/06/04 4:17 a.m.•20 views

CVE-2026-41283

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials...

9.9CVSS0.00915EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/06/04 12:00 a.m.•14 views

CVE-2026-41283

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials...

9.9CVSS5.9AI score0.00915EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/06/04 12:00 a.m.•14 views

CVE-2026-41283

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials...

9.9CVSS5.9AI score0.00915EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2026/06/04 12:00 a.m.•18 views

OpenStack Mistral-Dashboard 安全漏洞

OpenStack Mistral-Dashboard is an open-source graphical interface plugin for OpenStack. OpenStack Mistral-Dashboard versions 22.0.0 and earlier have security vulnerabilities. These vulnerabilities stem from exposed API endpoints that allow code execution, potentially leading to exposure of servic...

9.9CVSS5.4AI score0.00915EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/06/04 12:00 a.m.•21 views

EUVD-2026-34201

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials...

9.9CVSS5.9AI score0.00915EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/06/04 12:00 a.m.•16 views

CVE-2026-41283

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials...

9.9CVSS6.2AI score0.00915EPSS
SaveExploits0References4
CVE
CVE
•added 2026/06/04 12:00 a.m.•94 views

CVE-2026-41283

OpenStack Mistral

9.9CVSS5.9AI score0.00915EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/04 12:00 a.m.•1 views

CVE-2026-41283: Incorrect Authorization

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials...

9.9CVSS5.9AI score0.00915EPSS
SaveExploits0References3
OSV
OSV
•added 2026/06/04 12:00 a.m.•15 views

CVE-2026-41283

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials...

9.9CVSS6.2AI score
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/06/04 12:00 a.m.•41 views

PT-2026-46137

Name of the Vulnerable Software and Affected Versions OpenStack Mistral versions prior to 22.0.0 Description An issue exists where a policy enforcement bypass allows arbitrary remote code execution when the API is exposed. Specific API endpoints do not properly validate user-supplied inputs,...

9.9CVSS6.5AI score0.00915EPSS
SaveExploits0References34
Tenable Nessus
Tenable Nessus
•added 2025/12/01 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2021-4472

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of...

6.5CVSS5.5AI score0.00461EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2018-0099

Malware in sbrugna...

7.5CVSS5.7AI score0.0152EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2020-0112

Malware in sbrugna...

6.5CVSS6.7AI score0.01185EPSS
SaveExploits0References6
Rows per page
Query Builder