SecAlerts
CVE ListPricingSign Up
O

OpenStack

Security Risk Profile

44
/100
medium

Security Risk Score

Comprehensive risk assessment based on 487 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from October 26, 2011 to present

487
Total CVEs
134
Critical+High
0
Exploited
53
Unpatched

Threat Assessment

Avg CVSS
5.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
53
Critical/High
Risk Level
44/100
medium
🆕 6Fresh (<7d)📈 27 in Last 30 Days

Severity Distribution

Critical
23
High
111
Medium
215
Low
52

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
16

Age Distribution

Common Weaknesses (CWE)

1
Infoleak
46
2
XSS
20
3
Input Validation
14
4
Path Traversal
8
5
SSRF
7

Most Affected Products

1. Openstack Keystone163
2. Openstack Swift147
3. Openstack Nova123
4. Openstack Neutron107
5. redhat Openstack92

Recent Vulnerabilities

See more →
https://seclists.org/oss-sec/2026/q4/104
unknown

[OSSN-0110] Ironic can leak basic auth cdentials to image server

Oct 8, 2026🔧 No Patch
CVE-2026-97147
CVSS 7.2high

[OSSA-2026-044] OpenStack Mistral: Four authorization and privilege vulnerabilities in Mistral (CVE-2026-93858, CVE-2026-93860, CVE-2026-93861, CVE-2026-97147))

Oct 8, 2026🔧 No Patch
CVE-2026-93861
CVSS 6.0medium

[OSSA-2026-044] OpenStack Mistral: Four authorization and privilege vulnerabilities in Mistral (CVE-2026-93858, CVE-2026-93860, CVE-2026-93861, CVE-2026-97147))

Oct 8, 2026🔧 No Patch
CVE-2026-93860
CVSS 7.1high

[OSSA-2026-044] OpenStack Mistral: Four authorization and privilege vulnerabilities in Mistral (CVE-2026-93858, CVE-2026-93860, CVE-2026-93861, CVE-2026-97147))

Oct 8, 2026🔧 No Patch
CVE-2026-93858
CVSS 8.7high

[OSSA-2026-044] OpenStack Mistral: Four authorization and privilege vulnerabilities in Mistral (CVE-2026-93858, CVE-2026-93860, CVE-2026-93861, CVE-2026-97147))

Oct 8, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q4/103
unknown

[OSSA-2026-044] OpenStack Mistral: Four authorization and privilege vulnerabilities in Mistral (CVE-2026-93858, CVE-2026-93860, CVE-2026-93861, CVE-2026-97147))

Oct 8, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q4/91
unknown

[OSSN-0109] Cross-project metric association bypass in Gnocchi

Oct 7, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q4/90
unknown

[OSSA-2026-043] OpenStack Zaqar: Zaqar WebSocket project substitution allows cross-project queue access (CVE-2026-107363) errata 1

Oct 7, 2026🔧 No Patch
CVE-2026-107363
CVSS 6.1medium

[OSSA-2026-043] OpenStack Zaqar: Zaqar WebSocket project substitution allows cross-project queue access (CVE-2026-107363) errata 1

Oct 7, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q4/89
unknown

[OSSA-2026-043] OpenStack Zaqar: Zaqar WebSocket project substitution allows cross-project queue access (CVE-2026-pending)

Oct 7, 2026🔧 No Patch

Monitor OpenStack in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Start Free TrialBook a Demo
Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

Start Free TrialBook a Demo
AboutNewsDocumentationTermsContact

© 2026 SecAlerts Pty Ltd. All rights reserved.