CVE-2026-71201

In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project...

UBUNTU-CVE-2026-71201

In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project...

CVE-2026-71201

In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project...

CVE-2026-71201

OpenStack Ironic up to version 38.0.0 is affected. A crafted request from a project reader can cause Portgroups assigned to Nodes owned or leased by another project to be returned, enabling cross-project information disclosure. The CVSS 3.1 base score is 5.0 (MEDIUM) with Network attack vector an...

CVE-2026-71201

In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project...

EUVD-2026-53124

In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project...

CVE-2026-71201

In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project...

CVE-2026-71201

In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project...

Linux Distros Unpatched Vulnerability : CVE-2026-71201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another...

PT-2026-68012

Name of the Vulnerable Software and Affected Versions OpenStack Ironic versions prior to 38.0.1 Description An authorization bypass exists where a user with project reader permissions can make a crafted request to Ironic to retrieve Portgroups assigned to Nodes that are owned or leased by a...

CVE-2026-71201: Incorrect Authorization

In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project...