- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Severity across 55 analyzed records
As of 09/11/2026, OpenStack recorded 23 security vulnerabilities in the last 90 days across 12 products, including 9 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Ironic had the most security vulnerabilities in the OpenStack ecosystem, with 5 vulnerabilities—approximately 21.74% of the provider's total vulnerabilities during this period.
| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-80183CVE-2026-80183 | Exploitation statusNot known exploited | FixYes | Affected productKeystone | Published08/26/2026 | SeverityHigh |
CVE-2026-80184CVE-2026-80184 | Exploitation statusPublic exploit | FixYes | Affected productKeystone | Published08/25/2026 | SeverityHigh |
CVE-2026-80182CVE-2026-80182 | Exploitation statusPublic exploit | FixYes | Affected productKeystone | Published08/25/2026 | SeverityHigh |
CVE-2026-77648CVE-2026-77648 | Exploitation statusNot known exploited | FixYes | Affected productGlance | Published08/20/2026 | SeverityLow |
CVE-2026-76878CVE-2026-76878 | Exploitation statusNot known exploited | FixYes | Affected productAodh | Published08/19/2026 | SeverityHigh |
CVE-2026-74250CVE-2026-74250 | Exploitation statusNot known exploited | FixYes | Affected productIronic | Published08/14/2026 | SeverityMedium |
CVE-2026-74248CVE-2026-74248 | Exploitation statusPublic exploit | FixYes | Affected productOctavia | Published08/14/2026 | SeverityMedium |
CVE-2026-71194CVE-2026-71194 | Exploitation statusNot known exploited | FixYes | Affected productDesignate | Published08/12/2026 | SeverityMedium |
CVE-2026-71193CVE-2026-71193 | Exploitation statusNot known exploited | FixYes | Affected productDesignate | Published08/12/2026 | SeverityCritical |
CVE-2026-71201CVE-2026-71201 | Exploitation statusPublic exploit | FixYes | Affected productIronic | Published08/05/2026 | SeverityMedium |
CVE-2026-71192CVE-2026-71192 | Exploitation statusNot known exploited | FixYes | Affected productSwift | Published08/05/2026 | SeverityMedium |
CVE-2026-71191CVE-2026-71191 | Exploitation statusNot known exploited | FixYes | Affected productSwift | Published08/05/2026 | SeverityMedium |
CVE-2026-71190CVE-2026-71190 | Exploitation statusNot known exploited | FixYes | Affected productSwift | Published08/05/2026 | SeverityHigh |
CVE-2026-55707CVE-2026-55707 | Exploitation statusNot known exploited | FixYes | Affected productNeutron | Published08/05/2026 | SeverityHigh |
CVE-2026-66139CVE-2026-66139 | Exploitation statusNot known exploited | FixYes | Affected productZaqar | Published07/24/2026 | SeverityMedium |
CVE-2026-66138CVE-2026-66138 | Exploitation statusNot known exploited | FixYes | Affected productIronic Python Agent | Published07/24/2026 | SeverityHigh |
CVE-2026-54422CVE-2026-54422 | Exploitation statusNot known exploited | FixYes | Affected productIronic Python Agent | Published07/24/2026 | SeverityMedium |
CVE-2026-54423CVE-2026-54423 | Exploitation statusNot known exploited | FixYes | Affected productIronic | Published07/10/2026 | SeverityHigh |
CVE-2026-44918CVE-2026-44918 | Exploitation statusNot known exploited | FixYes | Affected productIronic | Published07/10/2026 | SeverityMedium |
CVE-2026-50221CVE-2026-50221 | Exploitation statusNot known exploited | FixYes | Affected productSwift | Published06/23/2026 | SeverityMedium |
CVE-2026-55748CVE-2026-55748 | Exploitation statusNot known exploited | FixYes | Affected productHorizon | Published06/17/2026 | SeverityMedium |
CVE-2026-46448CVE-2026-46448 | Exploitation statusPublic exploit | FixYes | Affected productNova | Published06/16/2026 | SeverityMedium |
CVE-2026-54421CVE-2026-54421 | Exploitation statusNot known exploited | FixYes | Affected productIronic | Published06/14/2026 | SeverityMedium |
CVE-2026-50589CVE-2026-50589 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published06/04/2026 | SeverityHigh |
CVE-2026-50266CVE-2026-50266 | Exploitation statusPublic exploit | FixYes | Affected productNeutron | Published06/04/2026 | SeverityLow |
CVE-2026-48681CVE-2026-48681 | Exploitation statusNot known exploited | FixYes | Affected productIronic | Published06/04/2026 | SeverityMedium |
CVE-2026-41283CVE-2026-41283 | Exploitation statusNot known exploited | FixYes | Affected productMistral | Published06/04/2026 | SeverityCritical |
CVE-2026-44917CVE-2026-44917 | Exploitation statusNot known exploited | FixYes | Affected productIronic | Published06/04/2026 | SeverityMedium |
CVE-2026-46447CVE-2026-46447 | Exploitation statusNot known exploited | FixYes | Affected productIronic | Published06/03/2026 | SeverityMedium |
CVE-2026-49299CVE-2026-49299 | Exploitation statusNot known exploited | FixYes | Affected productNeutron | Published05/28/2026 | SeverityMedium |
CVE-2026-44394CVE-2026-44394 | Exploitation statusNot known exploited | FixYes | Affected productKeystone | Published05/28/2026 | SeverityMedium |
CVE-2026-43000CVE-2026-43000 | Exploitation statusNot known exploited | FixYes | Affected productKeystone | Published05/28/2026 | SeverityHigh |
CVE-2026-42998CVE-2026-42998 | Exploitation statusNot known exploited | FixYes | Affected productKeystone | Published05/28/2026 | SeverityMedium |
CVE-2026-42999CVE-2026-42999 | Exploitation statusNot known exploited | FixYes | Affected productKeystone | Published05/28/2026 | SeverityHigh |
CVE-2026-49017CVE-2026-49017 | Exploitation statusNot known exploited | FixYes | Affected productSwift | Published05/27/2026 | SeverityHigh |
CVE-2026-44919CVE-2026-44919 | Exploitation statusPublic exploit | FixYes | Affected productIronic | Published05/14/2026 | SeverityMedium |
CVE-2026-44916CVE-2026-44916 | Exploitation statusNot known exploited | FixYes | Affected productIronic | Published05/08/2026 | SeverityLow |
CVE-2026-40213CVE-2026-40213 | Exploitation statusNot known exploited | FixYes | Affected productCyborg | Published05/07/2026 | SeverityHigh |
CVE-2026-40214CVE-2026-40214 | Exploitation statusNot known exploited | FixYes | Affected productCyborg | Published05/07/2026 | SeverityMedium |
CVE-2026-43002CVE-2026-43002 | Exploitation statusPublic exploit | FixYes | Affected productHorizon | Published05/05/2026 | SeverityMedium |
CVE-2026-42997CVE-2026-42997 | Exploitation statusNot known exploited | FixYes | Affected productIronic | Published05/05/2026 | SeverityHigh |
CVE-2026-43001CVE-2026-43001 | Exploitation statusNot known exploited | FixYes | Affected productKeystone | Published05/01/2026 | SeverityHigh |
CVE-2026-43003CVE-2026-43003 | Exploitation statusNot known exploited | FixYes | Affected productironic-python-agent | Published05/01/2026 | SeverityHigh |
CVE-2026-42510CVE-2026-42510 | Exploitation statusNot known exploited | FixYes | Affected productIronic | Published04/28/2026 | SeverityMedium |
CVE-2026-40683CVE-2026-40683 | Exploitation statusNot known exploited | FixYes | Affected productKeystone | Published04/14/2026 | SeverityHigh |
CVE-2026-33551CVE-2026-33551 | Exploitation statusPublic exploit | FixYes | Affected productKeystone | Published04/10/2026 | SeverityLow |
CVE-2026-40212CVE-2026-40212 | Exploitation statusNot known exploited | FixYes | Affected productSkyline | Published04/10/2026 | SeverityMedium |
CVE-2026-34881CVE-2026-34881 | Exploitation statusPublic exploit | FixYes | Affected productGlance | Published03/31/2026 | SeverityHigh |
CVE-2026-28370CVE-2026-28370 | Exploitation statusNot known exploited | FixYes | Affected productVitrage | Published02/27/2026 | SeverityCritical |
CVE-2026-24708CVE-2026-24708 | Exploitation statusNot known exploited | FixYes | Affected productNova | Published02/18/2026 | SeverityHigh |
CVE-2026-22797CVE-2026-22797 | Exploitation statusNot known exploited | FixYes | Affected productkeystonemiddleware | Published01/19/2026 | SeverityCritical |
CVE-2025-65073CVE-2025-65073 | Exploitation statusNot known exploited | FixYes | Affected productKeystone | Published11/17/2025 | SeverityHigh |
CVE-2025-44021CVE-2025-44021 | Exploitation statusNot known exploited | FixYes | Affected productIronic | Published05/08/2025 | SeverityLow |
CVE-2024-7319Openstack-heat: incomplete fix for cve-2023-1625 | Exploitation statusNot known exploited | FixYes | Affected productopenstack-heat | Published08/02/2024 | SeverityMedium |
CVE-2024-40767CVE-2024-40767 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published07/24/2024 | SeverityMedium |
CVE-2024-32498CVE-2024-32498 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published07/05/2024 | SeverityMedium |
CVE-2024-28718CVE-2024-28718 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published04/12/2024 | SeverityCritical |
CVE-2024-29156CVE-2024-29156 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published03/18/2024 | SeverityMedium |
CVE-2024-1141Glance-store: glance store access key logged in debug log level | Exploitation statusNot known exploited | FixYes | Affected productglance-store | Published02/01/2024 | SeverityMedium |
CVE-2023-1633Insecure barbican configuration file leaking credential | Exploitation statusNot known exploited | FixNot confirmed | Affected productopenstack-barbican | Published09/24/2023 | SeverityMedium |
CVE-2023-1636Incomplete container isolation | Exploitation statusNot known exploited | FixNot confirmed | Affected productopenstack-barbican | Published09/24/2023 | SeverityMedium |
CVE-2023-1625Information leak in api | Exploitation statusPublic exploit | FixNot confirmed | Affected productopenstack-heat | Published09/24/2023 | SeverityHigh |
CVE-2022-45582CVE-2022-45582 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2022-3101CVE-2022-3101 | Exploitation statusNot known exploited | FixNot confirmed | Affected producttripleo-ansible | Published03/23/2023 | SeverityUnknown |
CVE-2022-3146CVE-2022-3146 | Exploitation statusNot known exploited | FixNot confirmed | Affected producttripleo-ansible | Published03/23/2023 | SeverityUnknown |
CVE-2022-3277CVE-2022-3277 | Exploitation statusPublic exploit | FixNot confirmed | Affected productopenstack-neutron | Published03/06/2023 | SeverityMedium |
CVE-2022-4134CVE-2022-4134 | Exploitation statusNot known exploited | FixNot confirmed | Affected productopenstack | Published03/06/2023 | SeverityLow |
CVE-2022-47951CVE-2022-47951 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published01/26/2023 | SeverityMedium |
CVE-2022-47950CVE-2022-47950 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published01/18/2023 | SeverityMedium |
CVE-2022-3100CVE-2022-3100 | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat OpenStack Platform | Published01/18/2023 | SeverityMedium |
CVE-2022-38060CVE-2022-38060 | Exploitation statusNot known exploited | FixNot confirmed | Affected productOpenStack | Published12/21/2022 | SeverityHigh |
CVE-2022-38065CVE-2022-38065 | Exploitation statusPublic exploit | FixNot confirmed | Affected productOpenStack | Published12/21/2022 | SeverityHigh |
CVE-2022-23451CVE-2022-23451 | Exploitation statusNot confirmed | FixNot confirmed | Affected productopenstack/barbican | Published09/06/2022 | SeverityUnknown |
CVE-2022-23452CVE-2022-23452 | Exploitation statusNot confirmed | FixNot confirmed | Affected productopenstack/barbican | Published09/01/2022 | SeverityUnknown |
CVE-2022-2447CVE-2022-2447 | Exploitation statusNot confirmed | FixNot confirmed | Affected productopenstack-keystone | Published09/01/2022 | SeverityUnknown |
CVE-2022-0718CVE-2022-0718 | Exploitation statusNot confirmed | FixNot confirmed | Affected productopenstack/python-oslo.utils | Published08/29/2022 | SeverityUnknown |
CVE-2021-3585CVE-2021-3585 | Exploitation statusNot confirmed | FixNot confirmed | Affected productopenstack/tripleo-heat-templates. | Published08/26/2022 | SeverityUnknown |
CVE-2021-3563CVE-2021-3563 | Exploitation statusNot confirmed | FixNot confirmed | Affected productkeystone | Published08/26/2022 | SeverityUnknown |
CVE-2022-37394CVE-2022-37394 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/03/2022 | SeverityUnknown |
CVE-2021-4180CVE-2021-4180 | Exploitation statusNot confirmed | FixNot confirmed | Affected productopenstack-tripleo-heat-templates | Published03/23/2022 | SeverityUnknown |
CVE-2021-3654CVE-2021-3654 | Exploitation statusNot confirmed | FixNot confirmed | Affected productopenstack-nova | Published03/02/2022 | SeverityUnknown |
CVE-2021-40797CVE-2021-40797 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/08/2021 | SeverityUnknown |
CVE-2021-40085CVE-2021-40085 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/31/2021 | SeverityUnknown |
CVE-2021-38598CVE-2021-38598 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/23/2021 | SeverityUnknown |
CVE-2021-38155CVE-2021-38155 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/06/2021 | SeverityUnknown |
CVE-2017-8761CVE-2017-8761 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/02/2021 | SeverityUnknown |
CVE-2021-20267CVE-2021-20267 | Exploitation statusNot confirmed | FixNot confirmed | Affected productopenstack-neutron | Published05/28/2021 | SeverityUnknown |
CVE-2020-29565CVE-2020-29565 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/04/2020 | SeverityUnknown |
CVE-2020-26943CVE-2020-26943 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/16/2020 | SeverityUnknown |
CVE-2020-17376CVE-2020-17376 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/26/2020 | SeverityUnknown |
CVE-2020-12689CVE-2020-12689 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/06/2020 | SeverityUnknown |
CVE-2020-12690CVE-2020-12690 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/06/2020 | SeverityUnknown |
CVE-2020-12691CVE-2020-12691 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/06/2020 | SeverityUnknown |
CVE-2020-12692CVE-2020-12692 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/06/2020 | SeverityUnknown |
CVE-2020-9543CVE-2020-9543 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/12/2020 | SeverityUnknown |
CVE-2015-9543CVE-2015-9543 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/19/2020 | SeverityUnknown |
CVE-2012-5474CVE-2012-5474 | Exploitation statusNot confirmed | FixNot confirmed | Affected productpython-django-horizon | Published12/30/2019 | SeverityUnknown |
CVE-2012-5476CVE-2012-5476 | Exploitation statusNot confirmed | FixNot confirmed | Affected productopenstack-dashboard | Published12/30/2019 | SeverityUnknown |
CVE-2013-2167CVE-2013-2167 | Exploitation statusNot confirmed | FixNot confirmed | Affected productpython-keystoneclient | Published12/10/2019 | SeverityUnknown |
CVE-2013-2166CVE-2013-2166 | Exploitation statusNot confirmed | FixNot confirmed | Affected productpython-keystoneclient | Published12/10/2019 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan