CVE-2026-42510
MEDIUM
6,6
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: high
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Description
AI Translation Available
OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.
829
Inclusion of Functionality from Untrusted Control Sphere
IncompleteCommon Consequences
Security Scopes Affected:
Confidentiality
Integrity
Availability
Potential Impacts:
Execute Unauthorized Code Or Commands
Applicable Platforms
All platforms may be affected
http://www.openwall.com/lists/oss-security/2026/04/30/1
https://bugs.launchpad.net/ironic/+bug/2148331