| Bug | Description |
|---|
| TEMP-1144214-4C9607 | OSSN-0106: API ramdisk endpoints require network-level access controls |
| CVE-2026-54421 | In OpenStack Ironic before 37.0.1, when applying a PATCH to update fie ... |
| CVE-2026-50589 | In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious use ... |
| CVE-2026-48681 | OpenStack Ironic through before 35.0.2 allows file overwrite via direc ... |
| CVE-2026-46447 | OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE ... |
| CVE-2026-44919 | In OpenStack Ironic through 35.x before a3f6d73, during image handling ... |
| CVE-2026-44917 | OpenStack Ironic before 35.0.2 allows a malicious authenticated projec ... |
| CVE-2026-44916 | In OpenStack Ironic before 35.0.2 (in a certain non-default configurat ... |
| CVE-2026-43003 | An issue was discovered in OpenStack ironic-python-agent 1.0.0 through ... |
| CVE-2026-42997 | An issue was discovered in idrac in OpenStack Ironic before 35.0.1. Du ... |
| CVE-2026-42510 | OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-defa ... |
| CVE-2025-44021 | OpenStack Ironic before 29.0.1 can write unintended files to a target ... |
| CVE-2024-44082 | In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13. ... |
| CVE-2016-4985 | The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and ... |
| CVE-2015-7514 | OpenStack Ironic 4.2.0 through 4.2.1 does not "clean" the disk after u ... |