Zaqar vulnerabilities

1 known vulnerability in Zaqar from OpenStack. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.2 Critical severity

  Zaqar: Use of Less Trusted Source

  CVE-2026-97404Sep 24, 2026OpenStack

  In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticated remote attacker who knows a target project's UUID may bypass both Keystone authentication and pre-