https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:59:45.993962+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-108638 EUVD-2026-108638 2026-10-03T08:59:46.080920+00:00 EUVD-2026-108638 https://cve.radiocsirt.org/vuln/fkie_cve-2013-6426 fkie_cve-2013-6426 2026-10-03T08:59:46.080958+00:00

The cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and (1) create a stack via the CreateStack method or (2) update a stack via the UpdateStack method.

 https://cve.radiocsirt.org/vuln/ghsa-3m5x-89wr-x574 GHSA-3m5x-89wr-x574 2026-10-03T08:59:46.080992+00:00

The cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and (1) create a stack via the CreateStack method or (2) update a stack via the UpdateStack method.

 https://cve.radiocsirt.org/vuln/gsd-2013-6426 gsd-2013-6426 2026-10-03T08:59:46.081011+00:00 gsd-2013-6426 https://cve.radiocsirt.org/vuln/rhsa-2014:0090 RHSA-2014:0090 — Red Hat Security Advisory: openstack-heat security, bug fix, and enhancement update 2026-10-03T08:59:46.081024+00:00

Heat: CFN policy rules not all enforced Heat: ReST API doesn't respect tenant scoping

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-6426 Withdrawn: UBUNTU-CVE-2013-6426 2026-10-03T08:59:46.081044+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: heat

The cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and (1) create a stack via the CreateStack method or (2) update a stack via the UpdateStack method.