CVE-2026-46448 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.4 MEDIUM	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 19.47%

Affected Products (NVD)

Vendor	Product	Version
openstack	nova	18.0.0 ≤ 𝑥 < 31.3.1
openstack	nova	32.0.0 ≤ 𝑥 < 32.2.1
openstack	nova	33.0.0 ≤ 𝑥 < 33.0.2

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

nova

bookworm	postponed
bookworm (security)	vulnerable
bullseye	postponed
forky	2:33.0.1-5 fixed
sid	2:33.0.2-1 fixed
trixie	no-dsa
trixie (security)	vulnerable

Ubuntu Releases

Ubuntu Product

Codename

nova

bionic	needs-triage
focal	needed
jammy	Fixed 3:25.2.1-0ubuntu2.11 released
noble	Fixed 3:29.2.0-0ubuntu1.7 released
questing	Fixed 3:32.0.0-0ubuntu1.3 released
resolute	Fixed 3:33.0.0-0ubuntu3.1 released
xenial	needs-triage

Known Exploits!

Common Weakness Enumeration

CWE-669 - Incorrect Resource Transfer Between Spheres
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

References

https://bugs.launchpad.net/nova/+bug/2151252

https://www.openwall.com/lists/oss-security/2026/06/16/5

http://www.openwall.com/lists/oss-security/2026/06/16/5

https://bugs.launchpad.net/nova/+bug/2151252