CVE-2026-54423: OpenStack Ironic vulnerability
OpenStack · Ironic
Fixed in 37.0.1 · Affected: OpenStack Ironic before 37.0.1 · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 23% of scored CVEs
DescriptionCVE.org
In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to send arbitrary IPMI commands to a node, bypassing Ironic's access control.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- OpenStack · Ironicfrom 22.1.0 before 29.0.6; from 30.0.0 before 32.0.2; from 32.0.0 before 35.0.2; from 36.0.0 before 37.0.1
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
CoverageNo articles yet
No CyberSIXT article names CVE-2026-54423 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.