CVE-2026-66139

MEDIUM

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known.

StatusReceived

설명

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known.

Score Summary

CVSS Score: 4.8
Version: 3.1
VPI: 48
Why this VPI (explainable, experimental)
VPI breakdown
Impact 48.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 48.00
VPI formula vpi-v1
EPSS: 0.2%
(상위 16.2%)
Attack Vector: Network
High Complexity
No Privileges
No User Interaction
Scope Unchanged
Low Confidentiality Impact
No Integrity Impact
Low Availability Impact

Details

CWE Weakness Classification

References (2)

Impact	48.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	48.00