Input Validation and Logic

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential d…CVE-2018-14635The Openstack Project · CVSS 6.5 · 2.5% likely

   CWE-20

2. In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false. The API checks for the presence of the all_proj…CVE-2026-76878OpenStack · CVSS 8.4 · 0.6% likely

   CWE-688

3. In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL.CVE-2026-44919OpenStack · CVSS 4.3 · 0.5% likely

   CWE-696

4. In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project identifier in subsequent requests to the project authenticated by the Keystone token. An authen…CVE-2026-107363OpenStack · CVSS 6.1 · 0.5% likely

   CWE-472

5. In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations (PUT /v2/leases/{lease_id} and DELETE /v2/lease…CVE-2026-93854OpenStack · CVSS 7.2 · 0.4% likely

   CWE-1025

6. An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before authentication and thus storage can be e…CVE-2026-43002OpenStack · CVSS 5.3 · 0.4% likely

   CWE-696

7. OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service.CVE-2026-90458OpenStack · CVSS 5.4 · 0.3% likely

   CWE-1287

8. In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempURL signature only covers the method, expiry, and path, and…CVE-2026-97149OpenStack · CVSS 5.3 · 0.2% likely

   CWE-184

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.