Product by OpenStack

    OpenStack Ironic

    20 known vulnerabilities in OpenStack Ironic (OpenStack), 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in OpenStack Ironic (OpenStack)
    HighCVE-2026-43003

    OpenStack Ironic-python-agent: Inclusion of Functionality from Untrusted Control Sphere

    also in 2 other products

    		7.5
    MediumCVE-2015-7514

    OpenStack Ironic: Information Disclosure

    		6.5
    HighCVE-2026-42510

    OpenStack Ironic: Inclusion of Functionality from Untrusted Control Sphere

    		7.2
    HighCVE-2026-48681

    OpenStack Ironic: Relative Path Traversal

    also in 1 other product

    		5.9
    HighCVE-2026-42997

    OpenStack Ironic: Incorrect Resource Transfer Between Spheres

    also in 1 other product

    		7.7
    HighCVE-2026-54423

    OpenStack Ironic: Improper Protection of Alternate Path

    also in 1 other product

    		8.2
    MediumCVE-2026-90461

    OpenStack Ironic: Improper Restriction of Communication Channel to Intended Endpoints

    		6.3
    MediumCVE-2026-44919

    OpenStack Ironic: Incorrect Behavior Order

    		6.5
    MediumCVE-2026-90458

    OpenStack Ironic: Improper Validation of Specified Type of Input

    		5.4
    MediumCVE-2026-89419

    OpenStack Ironic: Improper Protection of Alternate Path

    		5.0
    MediumCVE-2026-74250

    OpenStack Ironic: Sensitive Information in Resource Not Removed Before Reuse

    		6.3
    MediumCVE-2026-44918

    OpenStack Ironic: Missing Authorization

    also in 1 other product

    		5.5
    MediumCVE-2026-54421

    OpenStack Ironic: Improper Removal of Sensitive Information Before Storage or Transfer

    also in 2 other products

    		6.8
    HighCVE-2026-50589

    OpenStack Ironic: Allocation of Resources Without Limits or Throttling

    		5.3
    MediumCVE-2026-115638

    OpenStack Ironic: Improper Handling of Highly Compressed Data (Data Amplification)

    		4.3
    MediumCVE-2026-71201

    OpenStack Ironic: Incorrect Authorization

    		5.0
    HighCVE-2026-46447

    OpenStack Ironic: Incorrect Resource Transfer Between Spheres

    also in 1 other product

    		5.8
    MediumCVE-2026-44917

    OpenStack Ironic: Incorrect Resource Transfer Between Spheres

    also in 1 other product

    		4.9
    LowCVE-2026-44916

    OpenStack Ironic: Improper Neutralization of Special Elements Used in a Template Engine

    also in 1 other product

    		3.0
    LowCVE-2025-44021

    OpenStack Ironic: Path Traversal

    		2.8

    All products by OpenStack