https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T05:46:49.375651+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-46448 CVE-2026-46448 2026-10-02T05:46:49.395903+00:00

Affected: OpenStack Nova

In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.

 https://db.gcve.eu/vuln/usn-8434-1 USN-8434-1 — nova vulnerability 2026-10-02T05:46:49.395977+00:00

Affected: Ubuntu:22.04:LTS: nova, Ubuntu:24.04:LTS: nova, Ubuntu:25.10: nova, Ubuntu:26.04:LTS: nova

It was discovered that Nova did not strip internal _nova-prefixed scheduler hints supplied by users on instance creation. An attacker could possibly use this issue to bypass Placement resource claims and scheduling constraint enforcement.