GHSA-wqpv-c3pp-3m58

ghsaUSosv

OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere

view advisory published 2026-04-28Licence: CC-BY-4.0

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-42510US	high7.2	0.57% (47th)	—	2026-04-28
OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.