Skip to main content

Threats Tagged 'cve-2026-43001'

View all threats tagged with 'cve-2026-43001'. Filter and sort to focus on specific types of threats.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Tag: cve-2026-43001

Threats Tagged 'cve-2026-43001'

Click on any threat for detailed analysis and mitigation recommendations

Red Hat OpenStack Services on OpenShift 18.0 (openstack-keystone) contains multiple security vulnerabilities that allow unauthorized access and privilege escalation. These include improper validation in EC2 credential creation leading to unauthorized cross-project access, incorrect LDAP user status handling causing unauthorized access, and privilege escalation through EC2 credential creation. Red Hat has released an important security update addressing these issues.

Join the discussion

An issue was discovered in OpenStack Keystone before 29.0.2. POST /v3/credentials did not validate that the caller-supplied project_id for an EC2-type credential matched the project of the authenticating application credential. This allowed an attacker holding an unrestricted application credential for project A to create an EC2 credential targeting project B; a subsequent /v3/ec2tokens exchange would then issue a Keystone token scoped to project B while still carrying the original app_cred_id, enabling cross-project lateral movement within the credential owner's role footprint.

Join the discussion

Showing 1 to 3 of 3 results

Filters:Tag: cve-2026-43001
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses