https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:17:33.178101+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-335663 EUVD-2026-335663 2026-10-04T17:17:33.628077+00:00 EUVD-2026-335663 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54423 fkie_cve-2026-54423 2026-10-04T17:17:33.628143+00:00

In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to send arbitrary IPMI commands to a node, bypassing Ironic's access control.

 https://cve.radiocsirt.org/vuln/ghsa-vxvx-hwwh-pp7c GHSA-vxvx-hwwh-pp7c 2026-10-04T17:17:33.628181+00:00

In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to send arbitrary IPMI commands to a node, bypassing Ironic's access control.

 https://cve.radiocsirt.org/vuln/rhsa-2026:60441 RHSA-2026:60441 — Red Hat Security Advisory: OpenShift Container Platform 4.22.12 bug fix and security update 2026-10-04T17:17:33.628199+00:00

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass postcss: PostCSS: Information disclosure and denial of service via crafted CSS input linkify-it: linkify-it: Denial of Service via algorithmic complexity vulnerability openstack-ironic: openstack-ironic: Arbitrary IPMI command execution via send_raw deployment step postcss: PostCSS: Information disclosure via crafted sourceMappingURL tar: node-tar: Denial of Service via crafted long-path tar archive

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-54423 UBUNTU-CVE-2026-54423 2026-10-04T17:17:33.628235+00:00

Affected: Ubuntu:16.04:LTS: ironic, Ubuntu:18.04:LTS: ironic, Ubuntu:20.04:LTS: ironic, Ubuntu:22.04:LTS: ironic, Ubuntu:24.04:LTS: ironic, Ubuntu:25.10: ironic, Ubuntu:26.04:LTS: ironic

In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to send arbitrary IPMI commands to a node, bypassing Ironic's access control.