https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T11:46:41.560494+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-327821 EUVD-2026-327821 2026-10-05T11:46:41.659884+00:00 EUVD-2026-327821 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54421 fkie_cve-2026-54421 2026-10-05T11:46:41.659934+00:00

In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.

 https://cve.radiocsirt.org/vuln/ghsa-j4cw-mcg2-2q78 GHSA-j4cw-mcg2-2q78 — OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties 2026-10-05T11:46:41.659993+00:00

Affected: PyPI: ironic

In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.

 https://cve.radiocsirt.org/vuln/pysec-2026-3852 PYSEC-2026-3852 — OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties 2026-10-05T11:46:41.660044+00:00

Affected: PyPI: ironic

In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-54421 UBUNTU-CVE-2026-54421 2026-10-05T11:46:41.660088+00:00

Affected: Ubuntu:16.04:LTS: ironic, Ubuntu:18.04:LTS: ironic, Ubuntu:20.04:LTS: ironic, Ubuntu:22.04:LTS: ironic, Ubuntu:24.04:LTS: ironic, Ubuntu:25.10: ironic, Ubuntu:26.04:LTS: ironic

In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1912 WID-SEC-W-2026-1912 — Red Hat OpenStack: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-05T11:46:41.660140+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenStack ausnutzen, um Informationen offenzulegen.