CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: litellm, openstack-nova-2025.2, openstack-placement-2025.2, py3-cassandra-medusa, openstack-horizon-2025.1, openstack-nova-2025.1, openstack-keystone-2026.1, kubeflow, openstack-keystone-2025.2, dask-kubernetes, dagster, openstack-kolla-toolbox-2026.1,...

GHSA-G6CJ-PR64-35W5 vulnerabilities

Vulnerabilities for packages: litellm, openstack-nova-2025.2, openstack-placement-2025.2, py3-cassandra-medusa, openstack-horizon-2025.1, openstack-nova-2025.1, openstack-keystone-2026.1, kubeflow, openstack-keystone-2025.2, dask-kubernetes, dagster, openstack-kolla-toolbox-2026.1,...

c7n-azure (0.7.10), c7n-openstack (0.1.1) +40 more potentially affected by CVE-2026-69248 via cryptography (3.4.6)

cryptography PYPI version 3.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.10 - c7n-openstack 0.1.1 - combocurve-api-v1 =0.1.0, =2.0.0rc1, =0.1.6.1, =0.0.3, =0.1.0, =0.2.8, =0.5.0, =0.10.0, =1.0.0...

c7n-azure (0.7.10), c7n-openstack (0.1.1) +40 more potentially affected by CVE-2026-69249 via cryptography (3.4.6)

cryptography PYPI version 3.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.10 - c7n-openstack 0.1.1 - combocurve-api-v1 =0.1.0, =2.0.0rc1, =0.1.6.1, =0.0.3, =0.1.0, =0.2.8, =0.5.0, =0.10.0, =1.0.0...

[SECURITY] Fedora 43 Update: restic-0.19.1-1.fc43

Fast, secure, efficient backup program. restic supports the following backends for storing backups natively: Local directory sftp server via SSH HTTP REST server protocol, rest-server Amazon S3 either from Amazon or using the Minio server OpenStack Swift BackBlaze B2 Microsoft Azure Blob Storage...

[SECURITY] Fedora 44 Update: restic-0.19.1-1.fc44

Fast, secure, efficient backup program. restic supports the following backends for storing backups natively: Local directory sftp server via SSH HTTP REST server protocol, rest-server Amazon S3 either from Amazon or using the Minio server OpenStack Swift BackBlaze B2 Microsoft Azure Blob Storage...

Openstack - Infomation Disclosure Detection

Openstack exposing Configuration or settings related to the Swift object storage system. !/usr/bin/env python3 -- coding: utf-8 -- """Openstack exposing Configuration or settings related to the Swift object storage system.""" from kittysploit import from lib.protocols.http.httpclient import...

OpenStack User Secrets Exposure Detection

Internal usersecrets.yml file is exposed in OpenStack. !/usr/bin/env python3 -- coding: utf-8 -- """Internal usersecrets.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenStack User Secrets Exposure Detection',...

GHSA-J5G9-F88F-GFJ3 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2, openstack-placement-2025.2, openstack-horizon-2025.1, openstack-nova-2025.1, openstack-keystone-2026.1, openstack-keystone-2025.2, openstack-placement-2026.1-fips, openstack-placement-2025.1, openstack-glance-2025.2, authentik,...

CVE-2026-59939 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2, openstack-placement-2025.2, openstack-horizon-2025.1, openstack-nova-2025.1, openstack-keystone-2026.1, openstack-keystone-2025.2, openstack-placement-2026.1-fips, openstack-placement-2025.1, openstack-glance-2025.2, authentik,...

Linux Distros Unpatched Vulnerability : CVE-2026-54422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic- python-agent, may be able to extract the credentials...

Linux Distros Unpatched Vulnerability : CVE-2026-66139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known. CVE-2026-66139 Note that Nessus relies on the presenc...

CVE-2026-54422

A flaw was found in OpenStack ironic-python-agent's bootc container deployment support. During bootc image deployment, the OCI registry pull secret was exposed to tenant-controlled container code running with host PID namespace visibility. A malicious bootc container image could read the operator...

CVE-2026-66139

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known...

DEBIAN-CVE-2026-66139

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known...

CVE-2026-66138

In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntpserver is passed to a shell...

DEBIAN-CVE-2026-54422

In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...

CVE-2026-54422

In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...

UBUNTU-CVE-2026-66139

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known...

UBUNTU-CVE-2026-54422

In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...