SecAlerts
O

OpenStack

Security Risk Profile

45
/100
medium

Security Risk Score

Comprehensive risk assessment based on 471 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from October 26, 2011 to present

471
Total CVEs
132
Critical+High
0
Exploited
56
Unpatched

Threat Assessment

Avg CVSS
5.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
56
Critical/High
Risk Level
45/100
medium
🆕 13Fresh (<7d)📈 20 in Last 30 Days

Severity Distribution

Critical
24
High
108
Medium
209
Low
52

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
13

Age Distribution

Common Weaknesses (CWE)

1
Infoleak
46
2
XSS
20
3
Input Validation
14
4
Path Traversal
8
5
Buffer Overflow
7

Most Affected Products

1. Openstack Keystone162
2. Openstack Swift147
3. Openstack Nova123
4. Openstack Neutron107
5. redhat Openstack92

Recent Vulnerabilities

See more →
https://seclists.org/oss-sec/2026/q3/921
unknown

[OSSA-2026-042] OpenStack Zaqar: Zaqar empty URL-Signatuheader bypasses authentication (CVE-2026-97404)

Sep 24, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q3/920
unknown

[OSSA-2026-041] OpenStack Swift: Cross-container information disclosuvia Swift tempurl (CVE-2026-97149)

Sep 24, 2026🔧 No Patch
CVE-2026-97404
CVSS 9.2critical

[OSSA-2026-042] OpenStack Zaqar: Zaqar empty URL-Signatuheader bypasses authentication (CVE-2026-97404)

Sep 24, 2026🔧 No Patch
CVE-2026-97149
CVSS 5.3EPSS 0%medium

[OSSA-2026-041] OpenStack Swift: Cross-container information disclosuvia Swift tempurl (CVE-2026-97149)

Sep 24, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q3/873
unknown

[OSSA-2026-039] OpenStack Octavia: HAProxy configuration injection leading to mote code execution in Octavia (CVE-2026-94572, CVE-2026-94571)

Sep 21, 2026🔧 No Patch
CVE-2026-94572
CVSS 9.4EPSS 1%critical

[OSSA-2026-039] OpenStack Octavia: HAProxy configuration injection leading to mote code execution in Octavia (CVE-2026-94572, CVE-2026-94571)

Sep 21, 2026
CVE-2026-94571
CVSS 9.4EPSS 1%critical

[OSSA-2026-039] OpenStack Octavia: HAProxy configuration injection leading to mote code execution in Octavia (CVE-2026-94572, CVE-2026-94571)

Sep 21, 2026
https://seclists.org/oss-sec/2026/q3/852
unknown

[OSSA-2026-039] OpenStack Octavia: HAProxy configuration injection leading to mote code execution in Octavia (CVE-2026-pending)

Sep 21, 2026🔧 No Patch
CVE-2026-93854
CVSS 7.2EPSS 0%high

[OSSA-2026-040] OpenStack Blazar: Multiple authorization vulnerabilities in the Blazar V2 lease API (CVE-2026-93852, CVE-2026-93854)

Sep 18, 2026🔧 No Patch
CVE-2026-93852
CVSS 7.1EPSS 0%high

[OSSA-2026-040] OpenStack Blazar: Multiple authorization vulnerabilities in the Blazar V2 lease API (CVE-2026-93852, CVE-2026-93854)

Sep 18, 2026🔧 No Patch

Monitor OpenStack in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

OpenStack Security Vulnerabilities & Risk Score | 471 CVEs | SecAlerts - SecAlerts