Linux Distros Unpatched Vulnerability : CVE-2026-46448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation. CVE-2026-46448 Note...

PT-2026-50448

Name of the Vulnerable Software and Affected Versions OpenStack Horizon versions prior to 25.7.4 Description OpenStack Horizon produces scripts for OpenStack RC file downloading that may contain a crafted project name with shell metacharacters. Shell metacharacters are special characters...

Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : OpenStack Keystone vulnerabilities (USN-8433-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8433-1 advisory. It was discovered that OpenStack Keystone allowed restricted application credentials to create EC2 credentials. An...

EUVD-2026-37218

In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...

OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints

Affects - Nova: =18.0.0 =32.0.0 =33.0.0 33.0.2 Description Erichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling...

CVE-2026-48524 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, openstack-keystone-2025.2-fips, openstack-placement-2026.1, openstack-glance-2026.1-fips, openstack-placement-2025.2-fips, netbox, openstack-glance-2025.1-fips, airflow-core, litellm, openstack-horizon-2025.1,...

GHSA-FHV5-28VV-H8M8 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, openstack-keystone-2025.2-fips, openstack-placement-2026.1, openstack-glance-2026.1-fips, openstack-placement-2025.2-fips, netbox, openstack-glance-2025.1-fips, airflow-core, litellm, openstack-horizon-2025.1,...

CVE-2026-48526 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, openstack-keystone-2025.2-fips, openstack-placement-2026.1, openstack-glance-2026.1-fips, openstack-placement-2025.2-fips, netbox, openstack-glance-2025.1-fips, airflow-core, litellm, openstack-horizon-2025.1,...

GHSA-XGMM-8J9V-C9WX vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, openstack-keystone-2025.2-fips, openstack-placement-2026.1, openstack-glance-2026.1-fips, openstack-placement-2025.2-fips, netbox, openstack-glance-2025.1-fips, airflow-core, litellm, openstack-horizon-2025.1,...

GHSA-JQ35-7PRP-9V3F vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, openstack-keystone-2025.2-fips, openstack-placement-2026.1, openstack-glance-2026.1-fips, openstack-placement-2025.2-fips, netbox, openstack-glance-2025.1-fips, airflow-core, litellm, openstack-horizon-2025.1,...

GHSA-W7VC-732C-9M39 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, openstack-keystone-2025.2-fips, openstack-placement-2026.1, openstack-glance-2026.1-fips, openstack-placement-2025.2-fips, netbox, openstack-glance-2025.1-fips, airflow-core, litellm, openstack-horizon-2025.1,...

CVE-2026-48523 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, openstack-keystone-2025.2-fips, openstack-placement-2026.1, openstack-glance-2026.1-fips, openstack-placement-2025.2-fips, netbox, openstack-glance-2025.1-fips, airflow-core, litellm, openstack-horizon-2025.1,...

CVE-2026-48525 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, openstack-keystone-2025.2-fips, openstack-placement-2026.1, openstack-glance-2026.1-fips, openstack-placement-2025.2-fips, netbox, openstack-glance-2025.1-fips, airflow-core, litellm, openstack-horizon-2025.1,...

CVE-2026-46448

In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...

CVE-2026-54421

A flaw was found in OpenStack Ironic. When an authorized user applies a PATCH operation to update volume properties, the system can inadvertently expose sensitive information, such as iSCSI credentials. This information disclosure vulnerability allows an attacker to gain access to credentials tha...

CVE-2026-48522 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, openstack-keystone-2025.2-fips, openstack-placement-2026.1, openstack-glance-2026.1-fips, openstack-placement-2025.2-fips, netbox, openstack-glance-2025.1-fips, airflow-core, litellm, openstack-horizon-2025.1,...

GHSA-993G-76C3-P5M4 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, openstack-keystone-2025.2-fips, openstack-placement-2026.1, openstack-glance-2026.1-fips, openstack-placement-2025.2-fips, netbox, openstack-glance-2025.1-fips, airflow-core, litellm, openstack-horizon-2025.1,...

USN-8433-1: OpenStack Keystone vulnerabilities

It was discovered that OpenStack Keystone allowed restricted application credentials to create EC2 credentials. An authenticated attacker with only a reader role could possibly use this issue to bypass the role restrictions imposed on the application credential. CVE-2026-33551 It was discovered...

SUSE CVE-2026-54421

In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information such as iSCSI credentials. The PATCH outcome is a security issue; the POST outcome is not a security issue...

CVE-2026-46448

OpenStack Nova before 33.0.2 is affected: the server create API does not strip internal _nova-prefixed scheduler hints, causing instances to be created without proper Placement allocation. This can enable resource misallocation and, in worst cases, denial of service through compute-node resource ...