8675 matches found
PT-2026-71364
Name of the Vulnerable Software and Affected Versions OpenStack Designate versions prior to 22.0.2 Description The mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. If two zones with the same name exist across different pools, the lookup fails, leading th...
CVE-2026-71194: Incorrect Resource Transfer Between Spheres
In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the handler to return REFUSED for all DNS...
PT-2026-71363
Name of the Vulnerable Software and Affected Versions OpenStack Designate versions prior to 22.0.1 Description An authenticated user can bypass zone creation checks by scheduling a zone to a different pool using the AttributeFilter scheduler. This occurs because the is subzone and is superzone...
GHSA-H7PC-VWP9-298G vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
CVE-2026-8404 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
CVE-2026-6873 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
GHSA-8CJM-8MP7-R2XF vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
GHSA-923M-GV2P-W5QP vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
CVE-2026-48587 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
CVE-2026-53878 vulnerabilities
Vulnerabilities for packages: authentik, authentik-fips, openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
GHSA-CRHF-3PFG-W68W vulnerabilities
Vulnerabilities for packages: authentik, authentik-fips, openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
GHSA-3H9F-R86X-QVJX vulnerabilities
Vulnerabilities for packages: authentik, authentik-fips, openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
GHSA-8QCX-XF44-272X vulnerabilities
Vulnerabilities for packages: authentik, authentik-fips, openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
CVE-2026-48588 vulnerabilities
Vulnerabilities for packages: authentik, authentik-fips, openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
CVE-2026-53877 vulnerabilities
Vulnerabilities for packages: authentik, authentik-fips, openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
CVE-2026-71190
A flaw was found in OpenStack Swift's proxy server. The Accept header parser uses a regular expression that is vulnerable to catastrophic backtracking. An unauthenticated attacker can send a crafted Accept header with a small number of backslash characters in an unterminated quoted string, causin...
CVE-2026-71192
A flaw was found in the S3API middleware of OpenStack Swift. When configured with s3acl=true non-default, Swift-native control headers such as X-Copy-From and X-Copy-From-Account are not sanitized from S3 API requests. Because the S3 ACL mode bypasses Swift's native authorization, an authenticate...
CVE-2026-71191
A flaw was found in the S3API middleware of OpenStack Swift. The SigV4 presigned URL implementation does not require that semantic x-amz- headers be included in the request signature. An attacker who obtains a presigned PUT URL can inject unsigned headers such as X-Amz-Copy-Source to copy objects...
