https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:07:20.056703+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-258900 EUVD-2026-258900 2026-10-03T20:07:20.422807+00:00 EUVD-2026-258900 https://cve.radiocsirt.org/vuln/fkie_cve-2024-32498 fkie_cve-2024-32498 2026-10-03T20:07:20.423002+00:00

An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.

 https://cve.radiocsirt.org/vuln/ghsa-r4v4-w9pv-6fph GHSA-r4v4-w9pv-6fph — OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access 2026-10-03T20:07:20.423127+00:00

Affected: PyPI: cinder, PyPI: glance, PyPI: nova

An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.

 https://cve.radiocsirt.org/vuln/gsd-2024-32498 gsd-2024-32498 2026-10-03T20:07:20.423271+00:00 gsd-2024-32498 https://cve.radiocsirt.org/vuln/pysec-2026-1708 PYSEC-2026-1708 — OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access 2026-10-03T20:07:20.423310+00:00

Affected: PyPI: nova

An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.

 https://cve.radiocsirt.org/vuln/rhsa-2024:4272 RHSA-2024:4272 — Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.3 security update 2026-10-03T20:07:20.423383+00:00

OpenStack: malicious qcow2/vmdk images

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-32498 UBUNTU-CVE-2024-32498 2026-10-03T20:07:20.423449+00:00

Affected: Ubuntu:Pro:16.04:LTS: glance, Ubuntu:16.04:LTS: cinder, Ubuntu:Pro:16.04:LTS: nova, Ubuntu:Pro:18.04:LTS: cinder, Ubuntu:Pro:18.04:LTS: glance, Ubuntu:Pro:18.04:LTS: nova, Ubuntu:20.04:LTS: cinder, Ubuntu:20.04:LTS: glance, Ubuntu:20.04:LTS: nova, Ubuntu:22.04:LTS: cinder and 5 more

An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1511 WID-SEC-W-2024-1511 — Red Hat OpenStack: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode 2026-10-03T20:07:20.423571+00:00

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat OpenStack ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.