CVE-2026-89419 — Vulnerability intelligence

—

Published: 2026-10-23T04:18:19.113

CVSS

5

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in other words, not using the specific maintenance endpoint.

Sources

• CVE-2026-89419
• Original advisory
• Original advisory