Findings

CVE-2026-42510

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.

Published Apr 28, 2026 · updated Aug 20, 2026 · openstack ironic

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 28, 2026 · NIST NVD

    Detected

    OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.

  2. Aug 20, 2026 · NIST NVD

    Updated

    OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.

Affected

  • cpe openstack/ironicversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-42510

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-42510

    OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.

    nvd.nist.gov

References

CVE-2026-42510 · ZeroDay Findings