CVE-2026-93854 | OpenStack Blazar up to 15.1.0/16.0.0/17.0.0 V2 Lease API authorize ID improper authorization

September 18, 2026 Yanac

A vulnerability, which was classified as very critical, has been found in OpenStack Blazar up to 15.1.0/16.0.0/17.0.0. Impacted is the function authorize of the component V2 Lease API. Performing a manipulation of the argument ID results in improper authorization.

This vulnerability is cataloged as CVE-2026-93854. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More