IR
Product
Ironic
19
CVEs
0
On KEV
8.2
Max CVSS
3
New 30D
Severity mix
Critical 0High 6Medium 11Low 2
Watch
Add Ironic to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44916 | 3.0 | May 8 | In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered without sandboxing Affected: 17.0.0 before 26.1.7; 27.0.0 before 29.0.6; 30.0.0 before 32.0.2; 33.0.0 before 35.0.2 |
| CVE-2025-44021 | 2.8 | May 8 | OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API) Affected: 24 before 24.1.3; 25 before 26.1.1; 27 before 29.0.1 |
Showing 2