CVEvulnerability

CVE-2026-71568

5.3 MEDIUM Published 2026-09-17 Modified 2026-09-18 Official page ↗

Status: Awaiting Analysis
Published: 2026-09-17
Last modified: 2026-09-18
Assigner: 74b3a70d-cca6-4d34-9789-e83b222ae3be
CVSS 3.1 (74b3a70d-cca6-4d34-9789-e83b222ae3be): 5.3 MEDIUM — CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses: CWE-306

Description

In BMCtest, Ironic is started without authentication and TLS for the duration of the test. Exploiting the problem requires winning the race with bmctest itself, which reduces the attack window and significantly increases its complexity.

Weakness · CWE (1)

CWE-306 Missing Authentication for Critical Functionality weakness

References

https://github.com/openshift-metal3/bmctest/security/advisories/GHSA-53vv-qh77-2hqh github.com

CVE-2026-71568

Description

Related

Weakness · CWE (1)

References