CVE-2026-44916 - CERT CVE

  1. CVE-2026-44916

ID CVE-2026-44916
Sažetak In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered without sandboxing.
Reference
CVSS
Base: 3.0
Impact: 1.4
Exploitability:1.3
Pristup
VektorSloženostAutentikacija
NETWORK HIGH HIGH
Impact
PovjerljivostCjelovitostDostupnost
LOW NONE NONE
CVSS vektor CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N
Zadnje važnije ažuriranje 12-05-2026 - 00:17
Objavljeno 08-05-2026 - 07:16