THREAT OPS › Threat News › [OSSN-0108] Multiple authentication vulnerabilities in Ceph affecting OpenStack
[OSSN-0108] Multiple authentication vulnerabilities in Ceph affecting OpenStack
<p>Posted by Goutham Pacha Ravi on Aug 20</p>OSSN-0108: Multiple authentication vulnerabilities in Ceph<br /> ---<br /> <br /> ### Summary ###<br /> <br /> The latest Ceph releases of Ceph 20.2.4 and Ceph 19.2.6 patch four CVEs<br /> across several components (CVE-2025-30156, CVE-2026-39944, CVE-2026-50152<br /> and CVE-2026-54330). All OpenStack services using CephX keyrings are <br /> affected.<
MITRE ATT&CK techniques
- VulnerabilitiesT1588.006
Indicators of compromise
- CVE-2025-30156cve
- CVE-2026-39944cve
- CVE-2026-50152cve
- CVE-2026-54330cve
Original source: https://seclists.org/oss-sec/2026/q3/541