https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:27:45.169020+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-368102 EUVD-2026-368102 2026-10-02T15:27:45.235880+00:00 EUVD-2026-368102 https://cve.radiocsirt.org/vuln/fkie_cve-2026-90461 fkie_cve-2026-90461 2026-10-02T15:27:45.235918+00:00

OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTP(S) Basic Authentication.

 https://cve.radiocsirt.org/vuln/ghsa-mpf9-7jmw-7hrh GHSA-mpf9-7jmw-7hrh 2026-10-02T15:27:45.235952+00:00

OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTP(S) Basic Authentication.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-90461 UBUNTU-CVE-2026-90461 2026-10-02T15:27:45.235969+00:00

Affected: Ubuntu:16.04:LTS: ironic, Ubuntu:18.04:LTS: ironic, Ubuntu:20.04:LTS: ironic, Ubuntu:22.04:LTS: ironic, Ubuntu:24.04:LTS: ironic, Ubuntu:26.04:LTS: ironic

OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTP(S) Basic Authentication.