What’s Vulnerable › Products
Red Hat OpenStack Platform 18.0 vulnerabilities
15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.
Check whether your Red Hat OpenStack Platform 18.0 version is affected
Latest Red Hat OpenStack Platform 18.0 vulnerabilities
- CVE-2026-114236 — Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers (CVSS 3.3)
- CVE-2026-92982 — Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection (CVSS 8.5)
- CVE-2026-83536 — Openstack-network-exporter: http.server has no readheadertimeout / readtimeout (slowloris) (CVSS 5.3)
- CVE-2026-83535 — Openstack-network-exporter: basic-auth uses plaintext password storage and non-constant-time comparison (CVSS 7.4)
- CVE-2026-87874 — Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller (CVSS 8.1)
- CVE-2026-87872 — Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure (CVSS 6.8)
- CVE-2026-80158 — Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings (CVSS 5.5)
- CVE-2026-34956 — Openvswitch: open vswitch: denial of service via malformed ftp epasv command (CVSS 5.9)
- CVE-2023-6110 — Openstack: deleting a non existing access rule deletes another existing access rule in it's scope (CVSS 5.5)
- CVE-2024-43168 — Unbound: heap-buffer-overflow in unbound (CVSS 4.8)
- CVE-2024-43167 — Unbound: null pointer dereference in unbound (CVSS 2.8)
- CVE-2024-4438 — Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform (CVSS 7.5)
- CVE-2024-4437 — Etcd: incomplete fix for cve-2021-44716 in openstack platform (CVSS 7.5)
- CVE-2024-4436 — Etcd: incomplete fix for cve-2022-41723 in openstack platform (CVSS 7.5)
- CVE-2024-1394 — Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads (CVSS 7.5)