CVE-2026-42510

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-42510
OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.

6.6 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.7 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://bugs.launchpad.net/ironic/+bug/2148331
https://security.openstack.org/ossa/OSSA-2026-008.html
http://www.openwall.com/lists/oss-security/2026/04/30/1
Configurations

No configuration.

History

20 May 2026, 17:16

Type Values Removed Values Added
References
  • () https://security.openstack.org/ossa/OSSA-2026-008.html -

30 Apr 2026, 04:16

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2026/04/30/1 -

28 Apr 2026, 07:16

Type Values Removed Values Added
Summary (en) OpenStack Ironic through 25.0.0 allows ipmitool execution in a non-default configuration that has a console interface. (en) OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.

28 Apr 2026, 06:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-04-28 06:16

Updated : 2026-05-20 17:16

NVD link : CVE-2026-42510

Mitre link : CVE-2026-42510

CVE.ORG link : CVE-2026-42510

JSON object : View

Products Affected

No product.

CWE
CWE-829

Inclusion of Functionality from Untrusted Control Sphere