Metal3.io Security

Search everything

Mentions · 7d0
Mentions · 30d1
All mentions1
First seenOct 22, 2026
Last mentioned8d ago

Timeline

1 articles · newest first

Ironic Redfish vendor_passthru allows path injection (CVE-2026-90458)

OSSA-2026-047 lists Ironic from 18.1.0 through 39.0.1; the snippet does not name a fix.

oss-securityOct 22, 18:55 UTC · 8d agoVulnerability 2 sourcesCVE-2026-904581

Related CVEs

by mentions

CVE-2026-904585.4
OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service
published 8d ago

Appears with

OpenStackvendor · 1
Ironicproduct · 1

Entities are extracted by the model from each article. First seen Oct 22, 2026, last mentioned 8d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.