Medium CVE-2026-44917 OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template. CVSS: 4.9 · CWE: CWE-669 View on NVD

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

[Medium] CVE-2026-44917 – OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or...

VERWANDTEARTIKEL

CVE-2026-49199

CVE-2026-49197

[Medium] CVE-2026-48681 – OpenStack Ironic through before 35.0.2 allows file overwrite via directory trave...

[Critical] CVE-2026-49185 – The FieldX MDM adb messaging topic passes unverified payloads directly into Runt...

[High] CVE-2026-49186 – The local MQTT broker does not enforce topic-level Access Control Lists (ACLs). ...

CVE-2026-49185 - Instruction Injection via FieldX MDM