CVE-2026-46448 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.4 MEDIUM	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 19%

Affected Products (NVD)

Vendor	Product	Version
openstack	nova	18.0.0 ≤ 𝑥 < 31.3.1
openstack	nova	32.0.0 ≤ 𝑥 < 32.2.1
openstack	nova	33.0.0 ≤ 𝑥 < 33.0.2

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

nova

bookworm	postponed
bookworm (security)	vulnerable
bullseye	postponed
bullseye (security)	vulnerable
forky	2:33.0.1-5 fixed
sid	2:33.0.1-5 fixed
trixie	no-dsa
trixie (security)	vulnerable

Known Exploits!

Common Weakness Enumeration

CWE-669 - Incorrect Resource Transfer Between Spheres
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

References

https://bugs.launchpad.net/nova/+bug/2151252

https://www.openwall.com/lists/oss-security/2026/06/16/5

http://www.openwall.com/lists/oss-security/2026/06/16/5

https://bugs.launchpad.net/nova/+bug/2151252