Medium
CVE-2026-54421
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 14
Reset filters
Medium
CVE-2026-48681
OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image
Medium
CVE-2026-46447
OpenStack Ironic allows Boot Script Injection
Medium
CVE-2026-44919
OpenStack Ironic: Pre-Validation Checksum Calculation allows Denial of Service (DoS) via Infinite Block Devices
High
CVE-2026-42997
OpenStack Ironic has an Incorrect Resource Transfer Between Spheres
Medium
CVE-2026-42510
OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere
Medium
CVE-2024-47211
OpenStack Ironic fails to verify checksums of supplied image_source URLs
High
CVE-2016-4985
OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor
Critical
Exploited in attacks
CVE-2025-62593
Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack
Medium
CVE-2026-50589
OpenStack Ironic: Crafted JSON String to Certain Endpoints on the API or JSON-RPC Service May Result in Service Crash
High
CVE-2026-43003
OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere
Low
CVE-2025-44021
OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API). A malicious project assigned as a node owner can prov
High
CVE-2019-10141
A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's node_cache.
High
CVE-2015-5306
Injection vulnerability that affects ironic-discoverd
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.