https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:39:19.520682+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-365473 EUVD-2026-365473 2026-10-03T23:39:20.130449+00:00 EUVD-2026-365473 https://cve.radiocsirt.org/vuln/fkie_cve-2026-43003 fkie_cve-2026-43003 2026-10-03T23:39:20.130528+00:00

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.

 https://cve.radiocsirt.org/vuln/ghsa-rmxr-45gj-889w GHSA-rmxr-45gj-889w — OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere 2026-10-03T23:39:20.130566+00:00

Affected: PyPI: ironic-python-agent

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.

 https://cve.radiocsirt.org/vuln/pysec-2026-205 PYSEC-2026-205 2026-10-03T23:39:20.130602+00:00

Affected: PyPI: ironic-python-agent

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.

 https://cve.radiocsirt.org/vuln/rhsa-2026:51038 RHSA-2026:51038 — Red Hat Security Advisory: OpenShift Container Platform 4.22.9 bug fix and security update 2026-10-03T23:39:20.130622+00:00

webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate ironic-python-agent: OpenStack ironic-python-agent: Arbitrary code execution via malicious image openstack-ironic: Prevent rehoming resources to nodes with different owner golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs linkify-it: linkify-it: Denial of Service via algorithmic complexity vulnerability openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on WSGI/PHP upstreams

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-43003 UBUNTU-CVE-2026-43003 2026-10-03T23:39:20.130660+00:00

Affected: Ubuntu:24.04:LTS: ironic-python-agent, Ubuntu:25.10: ironic-python-agent, Ubuntu:26.04:LTS: ironic-python-agent

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.