Product · OpenStack

Zaqar

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.1

CVE-2026-107363

In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project identifier in subsequent requests t…

OpenStack Zaqar zaqar zaqar Debian Ubuntu

Oct 7, 2026
Medium 4.8

CVE-2026-66139

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known.

OpenStack Zaqar zaqar zaqar Debian Ubuntu

Jul 24, 2026