Vitrage

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-28370 Feb 27, 05:18 PyPI CRITICAL POC PATCH Act Now

Code injection in OpenStack Vitrage query parser allows authenticated users to execute arbitrary Python code through crafted queries. Affects versions before 12.0.1, 13.0.0, 14.0.0, and 15.0.0. PoC available.

Authentication Bypass RCE Code Injection Vitrage Openstack

NVD GitHub

CVSS 3.1

9.1

EPSS

0.1%

CVE-2026-28370 PyPI

EPSS 0% CVSS 9.1

CRITICAL POC PATCH Act Now

Code injection in OpenStack Vitrage query parser allows authenticated users to execute arbitrary Python code through crafted queries. Affects versions before 12.0.1, 13.0.0, 14.0.0, and 15.0.0. PoC available.

Authentication Bypass RCE Code Injection +2

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy