Skip to content

CVE record · 1 source

CVE-2026-71195

CVSS 9.9

In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share.

Vendor: Red Hat
Product: OpenStack
CVSS: 9.9
EPSS: 0.005 (p42)
Exposure class: Hypervisor

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

30

CVE NVD 11d ago

In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share.

In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize operations against the caller's own project context, then load a…

CVSS 9.9 CVE-2026-71195 Red Hat