CVE-2026-66139

Published: Lug 24, 2026 Last Modified: Lug 25, 2026

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 4,8

Source: [email protected]

Attack Vector: network

Attack Complexity: high

Privileges Required: none

User Interaction: none

Scope: unchanged

Confidentiality: low

Integrity: none

Availability: low

AI Translation Available

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known.

306

Draft

Abstraction: Base Structure: Simple

Security Scopes Affected:

Access Control Other

Potential Impacts:

Gain Privileges Or Assume Identity Varies By Context

Technologies: Cloud Computing, ICS/OT

Likelihood of Exploit: High