769 matches found
CVE-2026-77648
A flaw was found in OpenStack Glance. A privileged administrator could exploit a vulnerability in the /v2/tasks API by crafting a specific import task. This action bypasses security filtering, enabling the administrator to perform Server-Side Request Forgery SSRF. As a result, an attacker could...
EUVD-2026-63759
In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass importfilteringopts, allowing an admin to fetch internal URLs from the Glance service network aka SSRF, as long as https:// or http:// is used. This API has been available only to admins since Xena, and it...
Linux Distros Unpatched Vulnerability : CVE-2026-77648
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass importfilteringopts, allowing an admin to fetch internal URLs from t...
CVE-2026-77648
In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass importfilteringopts, allowing an admin to fetch internal URLs from the Glance service network aka SSRF, as long as https:// or http:// is used. This API has been available only to admins since Xena, and it...
DEBIAN-CVE-2026-77648
In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass importfilteringopts, allowing an admin to fetch internal URLs from the Glance service network aka SSRF, as long as https:// or http:// is used. This API has been available only to admins since Xena, and it...
CVE-2026-77648
CVE-2026-77648 is a Server-Side Request Forgery (SSRF) vulnerability in OpenStack Glance through version 32.0.0. The /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing a privileged administrator to fetch internal URLs from the Glance service network using http:// ...
CVE-2026-77648
In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass importfilteringopts, allowing an admin to fetch internal URLs from the Glance service network aka SSRF, as long as https:// or http:// is used. This API has been available only to admins since Xena, and it...
PT-2026-79269
In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import filtering opts, allowing an admin to fetch internal URLs from the Glance service network aka SSRF, as long as https:// or http:// is used. This API has been available only to admins since Xena, and ...
CVE-2026-71491 vulnerabilities
Vulnerabilities for packages: openstack-glance-2025.1, superset, openstack-nova-2025.2, openstack-horizon-2025.2, openstack-glance-2025.1-fips, openstack-horizon-2025.2-fips, openstack-horizon-2026.1, openstack-horizon-2026.1-fips, airflow-postgres-fips, mlflow-fips, openstack-horizon-2025.1-fips...
GHSA-F2FF-P2WW-7P4P vulnerabilities
Vulnerabilities for packages: openstack-glance-2025.1, superset, openstack-nova-2025.2, openstack-horizon-2025.2, openstack-glance-2025.1-fips, openstack-horizon-2025.2-fips, openstack-horizon-2026.1, openstack-horizon-2026.1-fips, airflow-postgres-fips, mlflow-fips, openstack-horizon-2025.1-fips...
openstack-glance: OpenStack Glance: Server-Side Request Forgery leading to unauthorized internal network access
A flaw was found in OpenStack Glance. An authenticated user can exploit a Server-Side Request Forgery SSRF vulnerability within the web-download import feature. This vulnerability stems from inadequate validation of Uniform Resource Identifiers URIs, which can be circumvented using HTTP redirects...
GHSA-J5G9-F88F-GFJ3 vulnerabilities
Vulnerabilities for packages: openstack-glance-2025.1, openstack-keystone-2026.1, openstack-nova-2025.2, openstack-horizon-2025.2, openstack-glance-2025.1-fips, openstack-horizon-2025.2-fips, openstack-keystone-2025.2-fips, openstack-nova-2026.1, openstack-horizon-2026.1,...
CVE-2026-59939 vulnerabilities
Vulnerabilities for packages: openstack-glance-2025.1, openstack-keystone-2026.1, openstack-nova-2025.2, openstack-horizon-2025.2, openstack-glance-2025.1-fips, openstack-horizon-2025.2-fips, openstack-keystone-2025.2-fips, openstack-nova-2026.1, openstack-horizon-2026.1,...
CVE-2026-59890 vulnerabilities
Vulnerabilities for packages: openstack-glance-2025.1, openstack-keystone-2026.1, superset, text-generation-inference, openstack-horizon-2025.2, wazuh-manager, openstack-glance-2025.1-fips, openstack-horizon-2025.2-fips, openstack-keystone-2025.2-fips, openstack-horizon-2026.1,...
GHSA-H35F-9H28-MQ5C vulnerabilities
Vulnerabilities for packages: openstack-glance-2025.1, openstack-keystone-2026.1, superset, text-generation-inference, openstack-horizon-2025.2, wazuh-manager, openstack-glance-2025.1-fips, openstack-horizon-2025.2-fips, openstack-keystone-2025.2-fips, openstack-horizon-2026.1,...
CVE-2026-63770
Glance through 0.8.5 contains an IP address spoofing vulnerability in the authentication handler that allows unauthenticated attackers to bypass brute-force lockout protections by supplying arbitrary values in the X-Forwarded-For request header when the server proxied option is enabled. Attackers...
CVE-2026-63770 Glance 0.8.5 IP Spoofing Authentication Brute-Force Protection Bypass
Glance through 0.8.5 contains an IP address spoofing vulnerability in the authentication handler that allows unauthenticated attackers to bypass brute-force lockout protections by supplying arbitrary values in the X-Forwarded-For request header when the server proxied option is enabled. Attackers...
CVE-2026-63770
The CVE concerns Glance 0.8.5, where the authentication handler is vulnerable to IP address spoofing via the X-Forwarded-For header when the server proxied option is enabled. Attackers can alter the leftmost IP in the header to skew per-IP login counters, bypassing brute-force lockout protections...
CVE-2026-63770 Glance 0.8.5 IP Spoofing Authentication Brute-Force Protection Bypass
Glance through 0.8.5 contains an IP address spoofing vulnerability in the authentication handler that allows unauthenticated attackers to bypass brute-force lockout protections by supplying arbitrary values in the X-Forwarded-For request header when the server proxied option is enabled. Attackers...