DEBIAN-CVE-2026-90458

OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...

CVE-2026-90458

OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...

CVE-2026-90458

OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...

CVE-2026-90458

OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...

CVE-2026-90458

OpenStack Ironic versions prior to 39.0.1 are vulnerable to a path traversal vulnerability within the Redfish vendor passthrough subscription management. An authenticated attacker with vendor passthrough privileges can use a crafted subscription id to perform GET or DELETE operations on arbitrary...

EUVD-2026-108574

OpenStack Ironic before 39.0.1 allows DELETE and GET via vendorpassthru, e.g., to delete accounts from the BMC's Redfish service...

PT-2026-121748

OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor passthru, e.g., to delete accounts from the BMC's Redfish service...