9825 matches found
CVE-2026-71193
In OpenStack Designate before 22.0.1, zone creation checks issubzone, issuperzone, and the duplicate-zone DB constraint are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the AttributeFilter scheduler, creating an...
CVE-2026-71193
CVE-2026-71193 affects OpenStack Designate prior to 22.0.1. The vulnerability arises because zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool; an authenticated user can schedule a zone to another pool via the AttributeFilter sch...
CVE-2026-71193
In OpenStack Designate before 22.0.1, zone creation checks issubzone, issuperzone, and the duplicate-zone DB constraint are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the AttributeFilter scheduler, creating an...
CVE-2026-71193
In OpenStack Designate before 22.0.1, zone creation checks issubzone, issuperzone, and the duplicate-zone DB constraint are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the AttributeFilter scheduler, creating an...
PT-2026-71364
Name of the Vulnerable Software and Affected Versions OpenStack Designate versions prior to 22.0.2 Description The mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. If two zones with the same name exist across different pools, the lookup fails, leading th...
CVE-2026-71193: Incorrect Authorization
In OpenStack Designate before 22.0.1, zone creation checks issubzone, issuperzone, and the duplicate-zone DB constraint are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the AttributeFilter scheduler, creating an...
CVE-2026-71194: Incorrect Resource Transfer Between Spheres
In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the handler to return REFUSED for all DNS...
PT-2026-71363
Name of the Vulnerable Software and Affected Versions OpenStack Designate versions prior to 22.0.1 Description An authenticated user can bypass zone creation checks by scheduling a zone to a different pool using the AttributeFilter scheduler. This occurs because the is subzone and is superzone...
CVE-2026-6873 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...
GHSA-8CJM-8MP7-R2XF vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...
GHSA-H7PC-VWP9-298G vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...
CVE-2026-48587 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...
CVE-2026-8404 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...
GHSA-923M-GV2P-W5QP vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...
CVE-2026-48588 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1, authentik-fips, authentik...
CVE-2026-53878 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1, authentik-fips, authentik...
CVE-2026-53877 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1, authentik-fips, authentik...
GHSA-3H9F-R86X-QVJX vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1, authentik-fips, authentik...