6.6
CVE-2026-42510
- EPSS 0.08%
- Veröffentlicht 28.04.2026 04:53:10
- Zuletzt bearbeitet 30.04.2026 04:16:14
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
cPanel and WHM Authentication Bypass via Login Flow
OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerOpenStack
≫
Produkt
Ironic
Default Statusunaffected
Version <=
26.1.6
Version
4.3.0
Status
affected
Version <=
29.0.5
Version
27.0.0
Status
affected
Version <=
32.0.1
Version
30.0.0
Status
affected
Version <=
35.0.1
Version
33.0.0
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.08% | 0.241 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| cve@mitre.org | 6.6 | 0.7 | 5.9 |
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
|
CWE-829 Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.