Skip to content

CVE record · 1 source

CVE-2026-90458

CVSS 5.4

OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service.

Vendor: Red Hat
Product: OpenStack
CVSS: 5.4
Exposure class: Hypervisor

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

15

CVE NVD 9d ago

OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service.

OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service.

CVSS 5.4 CVE-2026-90458 Red Hat