Denial of Service

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. A vulnerability was found in Openstack Glance. No limits are enforced within the Glance image service for both v1 and v2 `/images` API POST method for authenticated users, resulti…CVE-2016-8611The Openstack Foundation · CVSS 4.3 · 2.3% likely

   CWE-400

2. In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking (ReDoS). The "qdtext" pattern (?:[^"…CVE-2026-71190OpenStack · CVSS 8.7 · 0.8% likely

   CWE-1333

3. In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or JSON-RPC service and effect a service cr…CVE-2026-50589OpenStack · CVSS 5.3 · 0.4% likely

   CWE-770

4. In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body. The StreamingInput class repeatedly…CVE-2026-49017OpenStack · CVSS 7.1 · 0.4% likely

   CWE-835

5. OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb.CVE-2026-115638OpenStack · CVSS 4.3 · 0.2% likely

   CWE-409

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.