RH
Product
Red Hat OpenStack Platform 18.0
19
CVEs
0
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 2High 11Medium 5Low 1
Watch
Add Red Hat OpenStack Platform 18.0 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-87872 | 6.8 | Sep 9 | Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure Affected: All versions, or not specified |
| CVE-2026-39828 | 6.3 | May 22 | Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh Affected: All versions, or not specified |
| CVE-2026-34956 | 5.9 | May 5 | Openvswitch: open vswitch: denial of service via malformed ftp epasv command Affected: All versions, or not specified |
| CVE-2026-80158 | 5.5 | Aug 26 | Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings Affected: All versions, or not specified |
| CVE-2026-83536 | 5.3 | Oct 12 | Openstack-network-exporter: http.server has no readheadertimeout / readtimeout (slowloris) Affected: All versions, or not specified |
Showing 5