Medium CVE-2026-46447 OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info. CVSS: 5.8 · CWE: CWE-669 View on NVD

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

[Medium] CVE-2026-46447 – OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if...

VERWANDTEARTIKEL

CVE-2026-49199

CVE-2026-49197

[Medium] CVE-2026-48681 – OpenStack Ironic through before 35.0.2 allows file overwrite via directory trave...

[Critical] CVE-2026-49185 – The FieldX MDM adb messaging topic passes unverified payloads directly into Runt...

[High] CVE-2026-49186 – The local MQTT broker does not enforce topic-level Access Control Lists (ACLs). ...

CVE-2026-49185 - Instruction Injection via FieldX MDM