CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-44916

In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered without sandboxing.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 24.2%

CVSS Severity

CVSS v3 Score 3.0

References

Products affected by CVE-2026-44916

Openstack » Ironic » Version: 17.0.0

cpe:2.3:a:openstack:ironic:17.0.0
Openstack » Ironic » Version: 17.0.1

cpe:2.3:a:openstack:ironic:17.0.1
Openstack » Ironic » Version: 17.0.2

cpe:2.3:a:openstack:ironic:17.0.2
Openstack » Ironic » Version: 17.0.3

cpe:2.3:a:openstack:ironic:17.0.3
Openstack » Ironic » Version: 17.0.4

cpe:2.3:a:openstack:ironic:17.0.4
Openstack » Ironic » Version: 17.1.0

cpe:2.3:a:openstack:ironic:17.1.0
Openstack » Ironic » Version: 18.0.0

cpe:2.3:a:openstack:ironic:18.0.0
Openstack » Ironic » Version: 18.1.0

cpe:2.3:a:openstack:ironic:18.1.0
Openstack » Ironic » Version: 18.2.0

cpe:2.3:a:openstack:ironic:18.2.0
Openstack » Ironic » Version: 18.2.1

cpe:2.3:a:openstack:ironic:18.2.1
Openstack » Ironic » Version: 18.2.2

cpe:2.3:a:openstack:ironic:18.2.2
Openstack » Ironic » Version: 18.3.0

cpe:2.3:a:openstack:ironic:18.3.0
Openstack » Ironic » Version: 19.0.0

cpe:2.3:a:openstack:ironic:19.0.0
Openstack » Ironic » Version: 20.0.0

cpe:2.3:a:openstack:ironic:20.0.0
Openstack » Ironic » Version: 20.1.0

cpe:2.3:a:openstack:ironic:20.1.0
Openstack » Ironic » Version: 20.1.1

cpe:2.3:a:openstack:ironic:20.1.1
Openstack » Ironic » Version: 20.1.2

cpe:2.3:a:openstack:ironic:20.1.2
Openstack » Ironic » Version: 20.1.3

cpe:2.3:a:openstack:ironic:20.1.3
Openstack » Ironic » Version: 20.2.0

cpe:2.3:a:openstack:ironic:20.2.0
Openstack » Ironic » Version: 21.0.0

cpe:2.3:a:openstack:ironic:21.0.0
Openstack » Ironic » Version: 21.1.0

cpe:2.3:a:openstack:ironic:21.1.0
Openstack » Ironic » Version: 21.1.1

cpe:2.3:a:openstack:ironic:21.1.1
Openstack » Ironic » Version: 21.1.2

cpe:2.3:a:openstack:ironic:21.1.2
Openstack » Ironic » Version: 21.2.0

cpe:2.3:a:openstack:ironic:21.2.0
Openstack » Ironic » Version: 21.3.0

cpe:2.3:a:openstack:ironic:21.3.0
Openstack » Ironic » Version: 21.4.0

cpe:2.3:a:openstack:ironic:21.4.0
Openstack » Ironic » Version: 21.4.1

cpe:2.3:a:openstack:ironic:21.4.1
Openstack » Ironic » Version: 21.4.2

cpe:2.3:a:openstack:ironic:21.4.2
Openstack » Ironic » Version: 21.4.3

cpe:2.3:a:openstack:ironic:21.4.3
Openstack » Ironic » Version: 21.4.4

cpe:2.3:a:openstack:ironic:21.4.4
Openstack » Ironic » Version: 22.0.0

cpe:2.3:a:openstack:ironic:22.0.0
Openstack » Ironic » Version: 22.1.0

cpe:2.3:a:openstack:ironic:22.1.0
Openstack » Ironic » Version: 23.0.0

cpe:2.3:a:openstack:ironic:23.0.0
Openstack » Ironic » Version: 23.0.1

cpe:2.3:a:openstack:ironic:23.0.1
Openstack » Ironic » Version: 23.0.2

cpe:2.3:a:openstack:ironic:23.0.2
Openstack » Ironic » Version: 23.0.3

cpe:2.3:a:openstack:ironic:23.0.3
Openstack » Ironic » Version: 23.0.4

cpe:2.3:a:openstack:ironic:23.0.4
Openstack » Ironic » Version: 23.0.5

cpe:2.3:a:openstack:ironic:23.0.5
Openstack » Ironic » Version: 23.1.0

cpe:2.3:a:openstack:ironic:23.1.0
Openstack » Ironic » Version: 24.0.0

cpe:2.3:a:openstack:ironic:24.0.0
Openstack » Ironic » Version: 24.1.0

cpe:2.3:a:openstack:ironic:24.1.0
Openstack » Ironic » Version: 24.1.1

cpe:2.3:a:openstack:ironic:24.1.1
Openstack » Ironic » Version: 24.1.2

cpe:2.3:a:openstack:ironic:24.1.2
Openstack » Ironic » Version: 24.1.3

cpe:2.3:a:openstack:ironic:24.1.3
Openstack » Ironic » Version: 24.1.4

cpe:2.3:a:openstack:ironic:24.1.4
Openstack » Ironic » Version: 24.1.5

cpe:2.3:a:openstack:ironic:24.1.5
Openstack » Ironic » Version: 25.0.0

cpe:2.3:a:openstack:ironic:25.0.0
Openstack » Ironic » Version: 26.0.0

cpe:2.3:a:openstack:ironic:26.0.0
Openstack » Ironic » Version: 26.1.0

cpe:2.3:a:openstack:ironic:26.1.0
Openstack » Ironic » Version: 26.1.1

cpe:2.3:a:openstack:ironic:26.1.1
Openstack » Ironic » Version: 26.1.2

cpe:2.3:a:openstack:ironic:26.1.2
Openstack » Ironic » Version: 26.1.3

cpe:2.3:a:openstack:ironic:26.1.3
Openstack » Ironic » Version: 26.1.4

cpe:2.3:a:openstack:ironic:26.1.4
Openstack » Ironic » Version: 26.1.5

cpe:2.3:a:openstack:ironic:26.1.5
Openstack » Ironic » Version: 26.1.6

cpe:2.3:a:openstack:ironic:26.1.6
Openstack » Ironic » Version: 27.0.0

cpe:2.3:a:openstack:ironic:27.0.0
Openstack » Ironic » Version: 28.0.0

cpe:2.3:a:openstack:ironic:28.0.0
Openstack » Ironic » Version: 29.0.0

cpe:2.3:a:openstack:ironic:29.0.0
Openstack » Ironic » Version: 29.0.1

cpe:2.3:a:openstack:ironic:29.0.1
Openstack » Ironic » Version: 29.0.2

cpe:2.3:a:openstack:ironic:29.0.2
Openstack » Ironic » Version: 29.0.3

cpe:2.3:a:openstack:ironic:29.0.3
Openstack » Ironic » Version: 29.0.4

cpe:2.3:a:openstack:ironic:29.0.4
Openstack » Ironic » Version: 29.0.5

cpe:2.3:a:openstack:ironic:29.0.5
Openstack » Ironic » Version: 30.0.0

cpe:2.3:a:openstack:ironic:30.0.0
Openstack » Ironic » Version: 31.0.0

cpe:2.3:a:openstack:ironic:31.0.0
Openstack » Ironic » Version: 32.0.0

cpe:2.3:a:openstack:ironic:32.0.0
Openstack » Ironic » Version: 32.0.1

cpe:2.3:a:openstack:ironic:32.0.1
Openstack » Ironic » Version: 33.0.0

cpe:2.3:a:openstack:ironic:33.0.0
Openstack » Ironic » Version: 34.0.0

cpe:2.3:a:openstack:ironic:34.0.0
Openstack » Ironic » Version: 35.0.0

cpe:2.3:a:openstack:ironic:35.0.0
Openstack » Ironic » Version: 35.0.1

cpe:2.3:a:openstack:ironic:35.0.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-44916

Products

Pricing

Contact Us