https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:33:22.353406+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-108576 EUVD-2026-108576 2026-10-03T07:33:22.433846+00:00 EUVD-2026-108576 https://cve.radiocsirt.org/vuln/fkie_cve-2013-6419 fkie_cve-2013-6419 2026-10-03T07:33:22.433884+00:00

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by (1) api/metadata/handler.py in Nova and (2) the neutron-metadata-agent (agent/metadata/agent.py) in Neutron.

 https://cve.radiocsirt.org/vuln/ghsa-22w9-j288-8p9w GHSA-22w9-j288-8p9w — OpenStack Nova Router metadata queries are not restricted by tenant 2026-10-03T07:33:22.433918+00:00

Affected: PyPI: nova

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by (1) api/metadata/handler.py in Nova and (2) the neutron-metadata-agent (`agent/metadata/agent.py`) in Neutron.

 https://cve.radiocsirt.org/vuln/gsd-2013-6419 gsd-2013-6419 2026-10-03T07:33:22.433943+00:00 gsd-2013-6419 https://cve.radiocsirt.org/vuln/pysec-2026-858 PYSEC-2026-858 — OpenStack Nova Router metadata queries are not restricted by tenant 2026-10-03T07:33:22.433955+00:00

Affected: PyPI: nova

Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound to a port, which is not properly handled by (1) api/metadata/handler.py in Nova and (2) the neutron-metadata-agent (`agent/metadata/agent.py`) in Neutron.

 https://cve.radiocsirt.org/vuln/rhsa-2014:0091 RHSA-2014:0091 — Red Hat Security Advisory: openstack-neutron security, bug fix, and enhancement update 2026-10-03T07:33:22.433975+00:00

Nova: Metadata queries from Neutron to Nova are not restricted by tenant