Manila (Openstack) - vulnerabilities (CVEs)

3 CVEs, 1 in the last 30 days, 42 known versions, newest CVE from 2026-10-21. Vendor: Openstack.

CVEs of Manila

• CVE-2026-71195 - CVSS 9.9 (critical), 2026-10-21: In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize…
• CVE-2020-9543 - CVSS 8.3 (high), 2020-03-12: OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because…
• CVE-2016-6519 - CVSS 5.4 (medium), 2017-04-21: Cross-site scripting (XSS) vulnerability in the "Shares" overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitrary web…