CVE-2026-90458 Blast Radius

MEDIUM • CVSS 5.4OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service.

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-90458.

Book a Demo →← Back to CVE-2026-90458