What’s Vulnerable › Products

Red Hat OpenStack Platform 16.2 vulnerabilities

15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Red Hat OpenStack Platform 16.2 version is affected

Latest Red Hat OpenStack Platform 16.2 vulnerabilities

• CVE-2026-92982 — Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection (CVSS 8.5)
• CVE-2026-92091 — Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array (CVSS 5.9)
• CVE-2026-84828 — Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token (CVSS 6.5)
• CVE-2026-80179 — Jwcrypto: jwcrypto: denial of service via malformed jwe tokens (CVSS 5.9)
• CVE-2026-34956 — Openvswitch: open vswitch: denial of service via malformed ftp epasv command (CVSS 5.9)
• CVE-2021-4472 — Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature (CVSS 6.5)
• CVE-2023-6110 — Openstack: deleting a non existing access rule deletes another existing access rule in it's scope (CVSS 5.5)
• CVE-2024-43168 — Unbound: heap-buffer-overflow in unbound (CVSS 4.8)
• CVE-2024-43167 — Unbound: null pointer dereference in unbound (CVSS 2.8)
• CVE-2024-4840 — Rhosp-director: cleartext passwords exposed in logs (CVSS 5.5)
• CVE-2024-3727 — Containers/image: digest type does not guarantee valid type (CVSS 8.3)
• CVE-2024-4438 — Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform (CVSS 7.5)
• CVE-2024-4437 — Etcd: incomplete fix for cve-2021-44716 in openstack platform (CVSS 7.5)
• CVE-2024-4436 — Etcd: incomplete fix for cve-2022-41723 in openstack platform (CVSS 7.5)
• CVE-2024-1394 — Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads (CVSS 7.5)