Openstack · weakness class

Supply Chain and Malicious Code

3 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed parti…CVE-2026-43003OpenStack · CVSS 8 · 1.0% likely
CWE-829
OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.CVE-2026-42510OpenStack · CVSS 6.6 · 0.6% likely
CWE-829
A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using t…CVE-2022-4134Openstack · CVSS 2.8 · 0.3% likely
CWE-829

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.