Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: OpenStack Ironic 29.0.6, 32.0.2 and 2 more versions Clear all filters
TI-2026-39299 CVE-2026-54423 · GHSA-vxvx-hwwh-pp7c

In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using…

Priority LOW 35

In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to send arbitrary IPMI commands to a node, bypassing Ironic's a…

CVSS 3.1HIGH 8.2 Network High privileges No interaction EPSS 0.00302 Published 2026-07-10 Fixed in 29.0.6, 32.0.2 +2 CWE-424