CVE-2026-89419
MEDIUM
NVD
CVSS Score
5
Severity
MEDIUM
Published
Oct 23, 2026
Vendor
unknown
Description
OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in other words, not using the specific maintenance endpoint.