Veille CVE

Vendredi 24 juillet 2026

2 CVE

Critique 0 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « OpenStack Ironic Python Agent » ✕
  1. CVE-2026-66138 7.2 Élevée

    OpenStack Ironic Python Agent

    In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntp_server is passed to a shell.

  2. CVE-2026-54422 5.5 Moyenne

    OpenStack Ironic Python Agent

    In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it.