THREATOPS
THREAT OPS › Threat News › [OSSA-2026-030] OpenStack Swift: S3API header authorization bypass (CVE-2026-pending)

[OSSA-2026-030] OpenStack Swift: S3API header authorization bypass (CVE-2026-pending)

lowoss_secPublished 2026-07-28

<p>Posted by Goutham Pacha Ravi on Jul 28</p>======================================================<br /> OSSA-2026-030: Swift S3API header authorization bypass<br /> ======================================================<br /> <br /> :Date: July 28, 2026<br /> :CVE: CVE-2026-pending,<br /> CVE-2026-pending<br /> <br /> Affects<br /> ~~~~~~~<br /> - Swift: &gt;=2.18.0 &lt;2.35.4, &gt;=2.36.

MITRE ATT&CK techniques

Original source: https://seclists.org/oss-sec/2026/q3/314