Priority LOW 24
In BMCtest, Ironic is started without authentication and TLS for the duration of the test.
Vulnerabilities
3 records
TI-2026-50137 CVE-2026-71567
User-controlled variables inserted unescaped into shell scripts and Kubernetes manifests
Priority LOW 34
In openshift-metal3/fakefish there is a repeated pattern in some of the scripts where shell variables are injected without quoting them either into command lines or into manifests.
TI-2026-50136 CVE-2026-71566
KubeVirt backend is not authenticated
Priority MEDIUM 46
FakeFish handles incoming credentials by passing them down to scripts.