CE
Product
ceph
11
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 4Low 0
Watch
Add ceph to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-30156 | 8.9 | Aug 27 | Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery Affected: < 19.2.6; >= 20.0.0, < 20.2.4 |
| CVE-2026-39944 | 8.8 | Aug 27 | Ceph: CephX AES Authentication error Affected: >= 19.0.0, < 19.2.6; >= 20.0.0, < 20.2.4 |
| CVE-2026-54330 | 8.1 | Aug 27 | Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation Affected: >= 19.0.0, < 19.2.6; >= 20.0.0, < 20.2.4 |
| CVE-2018-10861 | 8.1 | Jul 10 | A flaw was found in the way ceph mon handles user requests Affected: 10.2.0; 10.2.1; 10.2.2; 10.2.3; 10.2.4; 10.2.5; +16 more |
| CVE-2024-47866 | 7.5 | Nov 12 | RGW DoS attack with empty HTTP header in S3 object copy Affected: <= 19.2.3 |
| CVE-2019-10222 | 7.5 | Nov 8 | A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests Affected: All versions, or not specified |
Showing 6