CVE-2026-34881

MediumCVSS 5.0/10Last modified Aug 14, 2026

Description

OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.

Metrics

CVSS 3.1 5.0/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

Weakness enumeration

CWE-918

Affected software

No affected versions have been published.

Timeline

Published: Mar 31, 2026
Last modified: Aug 14, 2026
NVD status: Modified

Related CVEs from 2026

CVE-2026-348835.3An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors. On Windows, a symbolic link vulner CVE-2026-348849.8SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issue affects Apache Sky CVE-2026-348858.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant CVE-2026-348867.5Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions.CVE-2026-348876.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder al CVE-2026-348887.5Unauthenticated Sensitive Data Exposure in Bricksforge <= 3.1.8.4 versions.CVE-2026-348896.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for W CVE-2026-34897.5The DirectoryPress – Business Directory And Classified Ad Listing plugin for WordPress is vulnerable to SQL Injection via the 'packages' par CVE-2026-348906.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark O’Donnell MSTW League Manager all CVE-2026-348917.5Unauthenticated Sensitive Data Exposure in IDPay Payment Gateway for Woocommerce <= 2.2.5 versions.CVE-2026-348926.5Subscriber Broken Access Control in Rank Math SEO <= 1.0.271 versions.CVE-2026-348938.1Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions.