Manila vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

MA

Product

Manila

by OpenStack · last CVE Oct 21, 2026

3

CVEs

0

On KEV

9.9

Max CVSS

1

New 30D

Vulnerabilities3 In the news0 Timeline

Severity mix

Critical 1High 1Medium 1Low 0

Severity

All severities3 Critical1 High1 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Manila to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-71195	9.9	0%	Oct 21	In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share Affected: 1.0.0 before 20.0.3; 21.0.0 before 21.0.3; 22.0.0 before 22.0.2; 23.0.0 before 23.0.1
CVE-2020-9543	8.3	1%	Mar 12	OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free… Affected: before 7.4.1; 8.0.0 before 8.1.1; 9.0.0 before 9.1.1
CVE-2016-6519	5.4	1%	Apr 21	Cross-site scripting (XSS) vulnerability in the "Shares" overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitrary web script or HTML via the… Affected: through 2.5