CVE-2026-71201

Medium

In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned…

[email protected]·CWE-863·Published 2026-08-05

CVSS

5.0

EPSS

—

KEV

Exploits

cve.orgen

167 chars

In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project.

NVDen

167 chars

In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.0	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
3.1	Secondary	ENISA EUVD	5.0	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
3.1	Secondary	NVD	5.0	3.1	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CVE-2026-71201

CVSS metrics across sources