CVE-2026-44916

LowCVSS 3.0/10Last modified Jun 18, 2026

Description

In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered without sandboxing.

Metrics

CVSS 3.1 3.0/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N

Weakness enumeration

CWE-1336

Affected software

No affected versions have been published.

Timeline

Published
May 8, 2026
Last modified
Jun 18, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-449174.9OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pCVE-2026-449185.5OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.CVE-2026-449196.5In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///CVE-2026-44928.8A vulnerability was found in Tenda A18 Pro 02.03.02.28. The affected element is the function set_qosMib_list of the file /goform/formSetQosBCVE-2026-449236.5SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges.CVE-2026-449245.4InfoScale VIOM 9.1.3 allows XSS.CVE-2026-449258.8Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an CVE-2026-449268.8InfoScale CmdServer before 7.4.2 mishandles access control.CVE-2026-449275.3In uriparser before 1.0.2, there is pointer difference truncation to int in various places.CVE-2026-449285.3In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.CVE-2026-44938.8A vulnerability was determined in Tenda A18 Pro 02.03.02.28. The impacted element is the function sub_423B50 of the file /goform/setMacFilteCVE-2026-449309.8An LDAP injection vulnerability in the LDAP Certificate repository of the XKMS server in Apache CXF may allow an attacker to retrieve arbitr
CVE-2026-44916: Low severity, CVSS 3.0 | Vulnix