CVE-2026-66139

Basic Information

Severity MEDIUM
Base Score 4.8
CNA mitre
Published Date 2026-07-24 00:14:41 UTC
Last Modified 2026-07-24 00:14:41 UTC
CVE.org Link https://www.cve.org/CVERecord?id=CVE-2026-66139
NVD https://nvd.nist.gov/vuln/detail/CVE-2026-66139

Description

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known.

Affected Products

Vendor Product
openstack zaqar