{"schemaVersion":3,"id":"CVE-2026-44393","aliases":["GHSA-76qh-xr7q-h39m","PYSEC-2026-3492","UBUNTU-CVE-2026-44393","DEBIAN-CVE-2026-44393","openSUSE-SU-2026:10973-1","CGA-236h-jmpx-gjgm","CGA-243w-cq7c-m5p9","CGA-268q-h65x-6m7c","CGA-26c4-p4pv-4qgx","CGA-279f-rvhh-hf85","CGA-2hmp-gv77-283v","CGA-2x9v-pcg6-8wx7","CGA-3348-8c86-9x66","CGA-3449-4v3c-69rh","CGA-39q6-8wv5-q788","CGA-39qv-2xr9-3w95","CGA-3p5c-36gv-jr4c","CGA-4889-m9cf-cm3h","CGA-54j9-699f-w3r9","CGA-597p-g5p9-397c","CGA-5jcw-g4gp-xpfx","CGA-643f-qqq4-3pgj","CGA-6449-58xv-977h","CGA-65j6-r85j-v89m","CGA-6vfw-7c2m-9c2v","CGA-76v4-5493-86vf","CGA-7834-3m65-fx97","CGA-7f4p-rfpw-wcxr","CGA-86fm-qwx5-px2c","CGA-86q4-f6wv-v7wc","CGA-874p-vqp3-qhjc","CGA-87rr-q6mv-85x2","CGA-89mj-5p3j-7q8c","CGA-8wr7-ch68-pvjw","CGA-9hgp-wrmg-3gw7","CGA-9hmm-c5qf-v839","CGA-9vvg-r63r-88mw","CGA-9wh5-vg6c-jqq5","CGA-c3wg-4552-26v3","CGA-c8w3-4m56-mpvp","CGA-crpw-wvmv-w9m5","CGA-cwr8-hfvr-xxpj","CGA-f6jh-wq7j-7fg8","CGA-frxv-j3gj-3j2h","CGA-fwj6-q9jx-7cmw","CGA-gccj-x5fc-rc96","CGA-ggqc-2428-6v2g","CGA-gm62-p754-rj47","CGA-gv7w-j45f-mrg4","CGA-hc9v-rcqf-4v33","CGA-hqw4-r758-4wwp","CGA-j7rh-q54m-6x77","CGA-jcjm-5pfh-86mr","CGA-jg5p-cm5w-w3j3","CGA-jh39-vjm7-xhmr","CGA-jjwg-x3cg-2x37","CGA-jr43-69qw-f6hw","CGA-m36p-w3gq-wq64","CGA-mj95-rm55-63rg","CGA-p3wf-wcf9-hqq3","CGA-pg9g-mgrh-gcx2","CGA-pr46-vw78-mw83","CGA-q2rc-25gx-j8jf","CGA-q34r-86xg-fwwq","CGA-q43q-jhfm-47w5","CGA-q66h-cr4x-6vxv","CGA-qv2p-54fg-mwjq","CGA-rpcv-mxch-hxf6","CGA-rr6w-vc93-732x","CGA-rrc4-5mv8-wjg3","CGA-v5rf-695v-xq5f","CGA-v9vc-765x-m54x","CGA-vp8q-gh55-w8v2","CGA-w3h3-vwxj-gw52","CGA-w52m-5293-rp2r","CGA-w5r3-3r48-p4mp","CGA-w765-x5gj-8mv2","CGA-wcp3-9hcp-r5w2","CGA-x4rw-jhf2-7cx5","CGA-x769-7f2c-58x5","CGA-x8v7-jwpg-52m6"],"status":"published","duplicateOf":null,"title":null,"description":"An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When ssl_ca_file is configured, the driver enables certificate chain validation but does not pass the expected broker hostname into the underlying TLS stack. Any certificate signed by the deployment CA is accepted regardless of hostname, allowing an attacker who can intercept control-plane traffic to impersonate the RabbitMQ broker and perform a man-in-the-middle attack on RPC and notification traffic. All OpenStack services using oslo.messaging with RabbitMQ over TLS are affected.","dates":{"published":"2026-06-04T00:00:00.000Z","modified":"2026-08-27T12:04:50.939Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.4,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.4,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Pypi","score":7.4,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":5.6,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.4,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":5.6,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.4,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":5.6,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.4,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":5.6,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.4,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00281,"percentile":0.19366,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.109,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00172},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00172,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00172,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00172,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00172,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00172,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00172,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00172,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00172,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00172,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00172,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00281,"percentile":0.19366}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00172,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00172,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00172,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00172,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00281,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00281,"percentile":0.19366}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-297","name":"Improper Validation of Certificate with Host Mismatch","description":"The product communicates with a host that provides a certificate, but the product does not properly ensure that the certificate is actually associated with that host.","type":"weakness","status":"Incomplete","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/297.html"},{"id":"CWE-295","name":"Improper Certificate Validation","description":"The product does not validate, or incorrectly validates, a certificate.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/295.html"}],"affected":[{"vendor":"chainguard","product":"openstack-barbican-2025.2","name":"openstack-barbican-2025.2","label":"openstack-barbican-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-barbican-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-designate-2025.2","name":"openstack-designate-2025.2","label":"openstack-designate-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-designate-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-designate-2026.1","name":"openstack-designate-2026.1","label":"openstack-designate-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-designate-2026.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-glance-2025.1","name":"openstack-glance-2025.1","label":"openstack-glance-2025.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-glance-2025.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-glance-2025.1-fips","name":"openstack-glance-2025.1-fips","label":"openstack-glance-2025.1-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-glance-2025.1-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-glance-2025.2","name":"openstack-glance-2025.2","label":"openstack-glance-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-glance-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-glance-2025.2-fips","name":"openstack-glance-2025.2-fips","label":"openstack-glance-2025.2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-glance-2025.2-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-glance-2026.1","name":"openstack-glance-2026.1","label":"openstack-glance-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-glance-2026.1","purlType":"apk","versions":[{"text":"< 32.0.0_git20260930-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 32.0.0_git20260930-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-glance-2026.1-fips","name":"openstack-glance-2026.1-fips","label":"openstack-glance-2026.1-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-glance-2026.1-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-heat-2025.2","name":"openstack-heat-2025.2","label":"openstack-heat-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-heat-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-horizon-2025.1","name":"openstack-horizon-2025.1","label":"openstack-horizon-2025.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-horizon-2025.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-horizon-2025.1-fips","name":"openstack-horizon-2025.1-fips","label":"openstack-horizon-2025.1-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-horizon-2025.1-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-horizon-2025.2","name":"openstack-horizon-2025.2","label":"openstack-horizon-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-horizon-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-horizon-2025.2-fips","name":"openstack-horizon-2025.2-fips","label":"openstack-horizon-2025.2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-horizon-2025.2-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-horizon-2026.1","name":"openstack-horizon-2026.1","label":"openstack-horizon-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-horizon-2026.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-horizon-2026.1-fips","name":"openstack-horizon-2026.1-fips","label":"openstack-horizon-2026.1-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-horizon-2026.1-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-ironic-2025.2","name":"openstack-ironic-2025.2","label":"openstack-ironic-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-ironic-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-keystone-2025.1","name":"openstack-keystone-2025.1","label":"openstack-keystone-2025.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-keystone-2025.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-keystone-2025.1-fips","name":"openstack-keystone-2025.1-fips","label":"openstack-keystone-2025.1-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-keystone-2025.1-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-keystone-2025.2","name":"openstack-keystone-2025.2","label":"openstack-keystone-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-keystone-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-keystone-2025.2-fips","name":"openstack-keystone-2025.2-fips","label":"openstack-keystone-2025.2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-keystone-2025.2-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-keystone-2026.1","name":"openstack-keystone-2026.1","label":"openstack-keystone-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-keystone-2026.1","purlType":"apk","versions":[{"text":"< 29.0.1_git20260904-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 29.0.1_git20260904-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-keystone-2026.1-fips","name":"openstack-keystone-2026.1-fips","label":"openstack-keystone-2026.1-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-keystone-2026.1-fips","purlType":"apk","versions":[{"text":"< 29.0.1_git20260904-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 29.0.1_git20260904-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-manila-2025.2","name":"openstack-manila-2025.2","label":"openstack-manila-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-manila-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-neutron-2026.1","name":"openstack-neutron-2026.1","label":"openstack-neutron-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-neutron-2026.1","purlType":"apk","versions":[{"text":"< 28.0.2_git20260928-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 28.0.2_git20260928-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-nova-2025.1","name":"openstack-nova-2025.1","label":"openstack-nova-2025.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-nova-2025.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-nova-2025.2","name":"openstack-nova-2025.2","label":"openstack-nova-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-nova-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-nova-2026.1","name":"openstack-nova-2026.1","label":"openstack-nova-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-nova-2026.1","purlType":"apk","versions":[{"text":"< 33.0.1_git20260819-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 33.0.1_git20260819-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-octavia-2025.2","name":"openstack-octavia-2025.2","label":"openstack-octavia-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-octavia-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-placement-2025.1","name":"openstack-placement-2025.1","label":"openstack-placement-2025.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-placement-2025.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-placement-2025.1-fips","name":"openstack-placement-2025.1-fips","label":"openstack-placement-2025.1-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-placement-2025.1-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-placement-2025.2","name":"openstack-placement-2025.2","label":"openstack-placement-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-placement-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-placement-2025.2-fips","name":"openstack-placement-2025.2-fips","label":"openstack-placement-2025.2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-placement-2025.2-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-placement-2026.1","name":"openstack-placement-2026.1","label":"openstack-placement-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-placement-2026.1","purlType":"apk","versions":[{"text":"< 15.0.0_git20260806-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.0.0_git20260806-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-placement-2026.1-fips","name":"openstack-placement-2026.1-fips","label":"openstack-placement-2026.1-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-placement-2026.1-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-tempest-2025.1","name":"openstack-tempest-2025.1","label":"openstack-tempest-2025.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-tempest-2025.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-tempest-2025.2","name":"openstack-tempest-2025.2","label":"openstack-tempest-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-tempest-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-tempest-2026.1","name":"openstack-tempest-2026.1","label":"openstack-tempest-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-tempest-2026.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"python-oslo.messaging","name":"python-oslo.messaging","label":"python-oslo.messaging","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/python-oslo.messaging","purlType":"deb","versions":[{"text":"< 14.0.3-0+deb12u1","noFixRecorded":false,"fixedIn":null},{"text":"< 16.1.0-3+deb13u1","noFixRecorded":false,"fixedIn":null},{"text":"< 17.3.0-4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.0.3-0+deb12u1 | < 16.1.0-3+deb13u1 | < 17.3.0-4","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python-oslo.messaging","name":"python-oslo.messaging","label":"python-oslo.messaging","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python-oslo.messaging","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"PyPI","product":"oslo-messaging","name":"oslo-messaging","label":"oslo-messaging","ecosystem":"PyPI","cpePart":null,"purl":"pkg:pypi/oslo-messaging","purlType":"pypi","versions":[{"text":"≥ 1.0.0, ≤ 17.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.0.0, ≤ 17.3.0","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python-oslo.messaging&distro=openSUSE Tumbleweed","name":"python-oslo.messaging","label":"python-oslo.messaging&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python-oslo.messaging&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 18.1.0-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.1.0-1.1","eol":null,"hubHref":null}],"affectedCount":42,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://bugs.launchpad.net/oslo.messaging/+bug/2150316","label":"bugs.launchpad.net/oslo.messaging/+bug/2150316","hostname":"bugs.launchpad.net","tags":["WEB"]},{"url":"https://wiki.openstack.org/wiki/OSSN/OSSN-0096","label":"wiki.openstack.org/wiki/OSSN/OSSN-0096","hostname":"wiki.openstack.org","tags":["WEB","REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44393","label":"access.redhat.com/security/cve/CVE-2026-44393","hostname":"access.redhat.com","tags":["VDB Entry","X Refsource REDHAT","WEB"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484835","label":"bugzilla.redhat.com/show_bug.cgi?id=2484835","hostname":"bugzilla.redhat.com","tags":["Issue Tracking","X Refsource REDHAT","WEB"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44393.json","label":"security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44393.json","hostname":"security.access.redhat.com","tags":["X Sadp Csaf Vex","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54757","label":"access.redhat.com/errata/RHSA-2026:54757","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44393","label":"nvd.nist.gov/vuln/detail/CVE-2026-44393","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/openstack/oslo.messaging","label":"github.com/openstack/oslo.messaging","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://pypi.org/project/oslo-messaging","label":"pypi.org/project/oslo-messaging","hostname":"pypi.org","tags":["PACKAGE"]},{"url":"https://github.com/advisories/GHSA-76qh-xr7q-h39m","label":"github.com/advisories/GHSA-76qh-xr7q-h39m","hostname":"github.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-44393","label":"ubuntu.com/security/CVE-2026-44393","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44393","label":"www.cve.org/CVERecord?id=CVE-2026-44393","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://launchpad.net/bugs/2150316","label":"launchpad.net/bugs/2150316","hostname":"launchpad.net","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-44393","label":"security-tracker.debian.org/tracker/CVE-2026-44393","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44393","label":"www.suse.com/security/cve/CVE-2026-44393","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["RHSA-2026:54757"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-06-04T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-27T12:04:50.939Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T10:44:09.330Z","stale":false,"partial":false}}