Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: OpenStack Swift — security.openstack.org/ossa/OSSA-2026-030.html Clear all filters
TI-2026-49872 CVE-2026-71192 · GHSA-6p2v-36c6-f6m5

Incorrect authorization in OpenStack Swift

Priority LOW 27

In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers (X-Copy-From, X-Copy-From-Account) from S3 API requests when s3_acl=true.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00439 Published 2026-08-05 Partial fix · 2.35.4, 2.36.3 +1 CWE-863
TI-2026-49871 CVE-2026-71191 · GHSA-hqwm-h3rj-hvcf

Incorrect authorization in OpenStack Swift

Priority LOW 28

In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered by the SigV4 signature on presigned URL requests.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00564 Published 2026-08-05 Partial fix · 2.35.4, 2.36.3 +1 CWE-863