OpenStack / Zaqar

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-97404	In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticat…	CRITICAL	9.2	Sep 24, 2026
CVE-2026-66139	OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known.	MEDIUM	4.8	Jul 24, 2026

Rows per page

Showing 1 to 2 of 2 CVEs