Openstack Zaqar vulnerabilities

3 CVEs affecting Openstack Zaqar, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-107363, published 2026-10-07.

More from Openstack.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-66139, published 2026-07-24. Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days. OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known.
• CVE-2026-107363, published 2026-10-07. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project identifier in subsequent requests to the project authenticated by the Keystone token. An authenticated user with a…
• CVE-2026-97404, published 2026-09-24. Critical severity, CVSS 9.2. EPSS: 0.3% chance of exploitation in the next 30 days. In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticated remote attacker who knows a target…