https://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving OpenStack.Thu, 05 Nov 2026 14:31:10 GMThttps://seclists.org/oss-sec/2026/q4/250cst-10814OpenStack Manila contains a vulnerability that allows cross-project changes to public share and export metadata settings. The flaw affects Manila versions 1.0.0 through 23.0.0 across multiple release branches, with patches available in versions 20.0.3, 21.0.3, and 22.0.2. Sources: oss-security.Tue, 20 Oct 2026 17:05:04 GMThttps://seclists.org/oss-sec/2026/q3/921cst-8476OpenStack Zaqar versions before 20.1.2, 21.0.2, and 22.0.2 contain an authentication bypass vulnerability in which an empty URL-Signature header allows attackers to circumvent signature verification. The flaw was reported on September 24, 2026, and assigned CVE-2026-97404 with a CVSS score of 9.2. Sources: oss-security.Thu, 24 Sep 2026 16:33:41 GMThttps://seclists.org/oss-sec/2026/q3/873cst-8198OpenStack Octavia versions 0.8.0 through 16.1.0, 17.0.0, and 18.0.0 contain HAProxy configuration injection vulnerabilities that allow remote code execution. The flaws are tracked as CVE-2026-94572 and CVE-2026-94571 and were disclosed on September 21, 2026. Sources: oss-security.Tue, 22 Sep 2026 15:59:35 GMThttps://seclists.org/oss-sec/2026/q3/853cst-8065OpenStack Blazar versions 1.0.0 through 15.1.1, 16.0.0, and 17.0.0 contain multiple authorization flaws in the V2 lease application programming interface (API). The vulnerabilities, tracked as CVE-2026-93852 and CVE-2026-93854, allow improper access control in the lease management functionality. Sources: oss-security.Mon, 21 Sep 2026 17:20:50 GMT