exploitDog

CVE-2026-66139

Опубликовано: 24 июл. 2026

Источник: nvd

CVSS3: 4.8

EPSS Низкий

Описание

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known.

Ссылки

https://bugs.launchpad.net/ossa/+bug/2161254
https://www.openwall.com/lists/oss-security/2026/07/23/7
http://www.openwall.com/lists/oss-security/2026/07/24/27

EPSS

Процентиль: 22%

0.00294

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVE-2026-66139

CVSS3: 4.8

ubuntu

11 дней назад

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known.

CVE-2026-66139

CVSS3: 4.8

debian

11 дней назад

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXT ...

GHSA-gmmh-575h-g7v8

CVSS3: 4.8

github

11 дней назад

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known.

EPSS

Процентиль: 22%

0.00294

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-306