https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:36:30.999691+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-00689 bdu:2023-00689 2026-10-03T08:36:31.195903+00:00 bdu:2023-00689 https://cve.radiocsirt.org/vuln/euvd-2026-226286 EUVD-2026-226286 2026-10-03T08:36:31.195939+00:00 EUVD-2026-226286 https://cve.radiocsirt.org/vuln/fkie_cve-2022-47951 fkie_cve-2022-47951 2026-10-03T08:36:31.195953+00:00

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.

 https://cve.radiocsirt.org/vuln/ghsa-7h75-hwxx-qpgc GHSA-7h75-hwxx-qpgc — OpenStack Cinder, glance, and Nova vulnerable to Path Traversal 2026-10-03T08:36:31.195984+00:00

Affected: PyPI: cinder, PyPI: glance, PyPI: nova

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.

 https://cve.radiocsirt.org/vuln/gsd-2022-47951 gsd-2022-47951 2026-10-03T08:36:31.196015+00:00 gsd-2022-47951 https://cve.radiocsirt.org/vuln/pysec-2026-2411 PYSEC-2026-2411 — OpenStack Cinder, glance, and Nova vulnerable to Path Traversal 2026-10-03T08:36:31.196027+00:00

Affected: PyPI: cinder

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.

 https://cve.radiocsirt.org/vuln/rhsa-2023:1015 RHSA-2023:1015 — Red Hat Security Advisory: Red Hat OpenStack Platform 17.0 (openstack-nova) security update 2026-10-03T08:36:31.196047+00:00

openstack: Arbitrary file access through custom VMDK flat descriptor

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-47951 UBUNTU-CVE-2022-47951 2026-10-03T08:36:31.196064+00:00

Affected: Ubuntu:16.04:LTS: cinder, Ubuntu:Pro:16.04:LTS: nova, Ubuntu:18.04:LTS: cinder, Ubuntu:18.04:LTS: nova, Ubuntu:20.04:LTS: cinder, Ubuntu:20.04:LTS: glance, Ubuntu:20.04:LTS: nova, Ubuntu:22.04:LTS: cinder, Ubuntu:22.04:LTS: glance, Ubuntu:22.04:LTS: nova

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0518 WID-SEC-W-2023-0518 — Red Hat OpenStack: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen 2026-10-03T08:36:31.196098+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um Informationen offenzulegen.