https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:58:27.078906+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-42997 CVE-2026-42997 2026-10-02T16:58:27.080785+00:00

Affected: OpenStack Ironic, Red Hat OpenShift Container Platform 4, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.1, Red Hat OpenStack Platform 18.0

An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenStack services Ironic is authorized for); or basic credentials configured for molds storage. The fixed versions are 26.1.6, 29.0.5, 32.0.1, and 35.0.1.

 https://cve.radiocsirt.org/vuln/ghsa-54w4-233h-x86g GHSA-54w4-233h-x86g — OpenStack Ironic has an Incorrect Resource Transfer Between Spheres 2026-10-02T16:58:27.080857+00:00

Affected: PyPI: ironic-python-agent

An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenStack services Ironic is authorized for); or basic credentials configured for molds storage. The fixed versions are 26.1.6, 29.0.5, 32.0.1, and 35.0.1.