CVE-2026-80182General

LOWCVSS 7.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped authentication could create new long-lived credentials or authorize new delegations that persist independently of, and outlive, the credential used to obtain them. The delegation restrictions that block these operations did not consistently apply to all delegated token types, allowing an OAuth1-scoped token, for example, to create application credentials or authorize OAuth1 request tokens despite those operations being restricted for other delegated token types. All Keystone deployments that permit delegated authentication through OAuth1 access tokens, application credentials, or trusts are affected.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-08-25); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-08-25: 1Mentions · 2026-08-26: 1Technical Details · 2026-08-26: 108-2508-26
Signal classification2 categories
General
150.0%
Disclosure
150.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-08-251
General1
2026-08-261
Disclosure1
Full discourse2 posts
  • MalwareObserver@MalwareObserver
    Disclosure

    🐛 VULNERABILITIES (CVSS 8.1) CVE-2026-80182: — severity important — Red Hat Security Data (JSON) https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-80182.json #Vulnerability #CVE #ZeroDay

    Post summary

    Red Hat announces CVE‑2026‑80182 with a CVSS score of 8.1 and offers a link to the official security data JSON, but does not provide PoC, exploit code, or patch information.

    0000027
    27 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-80182 OpenStack Keystone https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-80182 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    The tweet merely announces CVE-2026-80182 for OpenStack Keystone and provides links to vulnerability details and alert subscription, offering no further technical or exploitation information.

    00000163
    4.1K followersView on X

Explore more