8263 matches found
CVE-2026-71194
Technical details for CVE-2026-71194 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-71194
In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the handler to return REFUSED for all DNS...
CVE-2026-71194
In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the handler to return REFUSED for all DNS...
CVE-2026-71193
In OpenStack Designate before 22.0.1, zone creation checks issubzone, issuperzone, and the duplicate-zone DB constraint are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the AttributeFilter scheduler, creating an...
CVE-2026-71193
In OpenStack Designate before 22.0.1, zone creation checks issubzone, issuperzone, and the duplicate-zone DB constraint are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the AttributeFilter scheduler, creating an...
CVE-2026-71193
CVE-2026-71193 affects OpenStack Designate prior to 22.0.1. The vulnerability arises because zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool; an authenticated user can schedule a zone to another pool via the AttributeFilter sch...
CVE-2026-71193
In OpenStack Designate before 22.0.1, zone creation checks issubzone, issuperzone, and the duplicate-zone DB constraint are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the AttributeFilter scheduler, creating an...
PT-2026-71364
Name of the Vulnerable Software and Affected Versions OpenStack Designate versions prior to 22.0.2 Description The mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. If two zones with the same name exist across different pools, the lookup fails, leading th...
PT-2026-71363
Name of the Vulnerable Software and Affected Versions OpenStack Designate versions prior to 22.0.1 Description An authenticated user can bypass zone creation checks by scheduling a zone to a different pool using the AttributeFilter scheduler. This occurs because the is subzone and is superzone...
GHSA-H7PC-VWP9-298G vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
CVE-2026-8404 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
CVE-2026-6873 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
GHSA-8CJM-8MP7-R2XF vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
GHSA-923M-GV2P-W5QP vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
CVE-2026-48587 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
CVE-2026-53878 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips, authentik-fips, authentik...
GHSA-CRHF-3PFG-W68W vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips, authentik-fips, authentik...
GHSA-3H9F-R86X-QVJX vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips, authentik-fips, authentik...