Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
OpenStack

OpenStack Glance vulnerabilities

3 published CVEs name OpenStack Glance among the affected products.

All 3 in the listAtom feed of new CVEs
Published CVEs
3
Last 12 months
3
Critical
0
Known exploited
0

Critical 0High 1Medium 1Low 1Not scored 0

Newest CVEs

  • CVE-2026-71198

    In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image. Unlike the web-download…

    OpenStack · Glance

    High7.0
  • CVE-2026-77648

    In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs…

    OpenStack · Glance

    Low2.2
  • CVE-2026-34881

    OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated…

    OpenStack · Glance

    Medium5.0

Most common weaknesses

  1. CWE-918 Server-side request forgery (SSRF)3