https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:59:42.659766+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-04265 cnvd-2016-04265 2026-10-03T04:59:42.666919+00:00 cnvd-2016-04265 https://cve.radiocsirt.org/vuln/euvd-2026-84858 EUVD-2026-84858 2026-10-03T04:59:42.666958+00:00 EUVD-2026-84858 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4985 fkie_cve-2016-4985 2026-10-03T04:59:42.666972+00:00

The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the v1/drivers/$DRIVER_NAME/vendor_passthru resource.

 https://cve.radiocsirt.org/vuln/ghsa-f7cr-7c2c-fm8r GHSA-f7cr-7c2c-fm8r — OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor 2026-10-03T04:59:42.667003+00:00

Affected: PyPI: ironic

The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the `v1/drivers/$DRIVER_NAME/vendor_passthru` resource.

 https://cve.radiocsirt.org/vuln/gsd-2016-4985 gsd-2016-4985 2026-10-03T04:59:42.667030+00:00 gsd-2016-4985 https://cve.radiocsirt.org/vuln/pysec-2026-646 PYSEC-2026-646 — OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor 2026-10-03T04:59:42.667041+00:00

Affected: PyPI: ironic

The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the `v1/drivers/$DRIVER_NAME/vendor_passthru` resource.

 https://cve.radiocsirt.org/vuln/rhsa-2016:1377 RHSA-2016:1377 — Red Hat Security Advisory: openstack-ironic security update 2026-10-03T04:59:42.667061+00:00

openstack-ironic: Ironic Node information including credentials exposed to unauthenticated users

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-4985 UBUNTU-CVE-2016-4985 2026-10-03T04:59:42.667078+00:00

Affected: Ubuntu:16.04:LTS: ironic

The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the v1/drivers/$DRIVER_NAME/vendor_passthru resource.