Skip to main content

Threats Tagged 'cve-2026-24708'

View all threats tagged with 'cve-2026-24708'. Filter and sort to focus on specific types of threats.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Tag: cve-2026-24708

Threats Tagged 'cve-2026-24708'

Click on any threat for detailed analysis and mitigation recommendations

A vulnerability in OpenStack Nova allows an authenticated user to overwrite arbitrary files on the compute host due to unconstrained handling of disk image formats by the qemu-img utility. This can lead to data destruction or denial of service during instance operations such as resizing. The issue affects certain versions of Red Hat OpenStack Services on OpenShift. No effective mitigation is currently available that meets Red Hat's criteria for ease of use and stability.

Join the discussion

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.

Join the discussion

Showing 1 to 3 of 3 results

Filters:Tag: cve-2026-24708
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses