Skip to content
OpenAdvisories

Product · OpenStack

Ironic

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-54423

    In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface …

    OpenStack Ironic ironic ironic Debian Ubuntu
  • High 7.7
    CVE-2026-42997

    OpenStack Ironic has an Incorrect Resource Transfer Between Spheres

    An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenSta…

    OpenStack Ironic ironic ironic Debian Ubuntu PyPI