Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs from the Glance service network (aka SSRF), as long as https:// or http:// is used. This API has been available only to admins since Xena, and it has been deprecated for several releases.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-20 | 2 | Disclosure2 |
| 2026-08-21 | 1 | Disclosure1 |
CVE-2026-77648 OpenStack Glance SSRF Vulnerability via /v2/tasks API https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-77648
Post summary
The text announces a new SSRF vulnerability (CVE-2026-77648) affecting OpenStack Glance's /v2/tasks API, without providing exploitation details or remediation.
🚨*CVE* CVE-2026-77648 In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs from the G… https://www.cve.org/CVERecord?id=CVE-2026-77648 ----- Traducción: CVE-2026-77648 En … https://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑77648, revealing a flaw in OpenStack Glance that lets administrators bypass import filtering to access internal URLs via the /v2/tasks API. No exploit, patch, or active use is referenced.
CVE-2026-77648 In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs from the G… https://www.cve.org/CVERecord?id=CVE-2026-77648
Post summary
A new CVE (CVE‑2026‑77648) in OpenStack Glance lets administrative users bypass import filtering on the /v2/tasks API, exposing internal URLs.