ceph

Products

Exploited and recent CVEs

• CVE-2026-54330 High 8.1 Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation 0.4%
• CVE-2026-50152 Critical 9.1 Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users 0.2%
• CVE-2026-39944 High 8.8 Ceph: CephX AES Authentication error 0.3%
• CVE-2025-30156 High 8.9 Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery <0.1%
• CVE-2024-47866 High 7.5 RGW DoS attack with empty HTTP header in S3 object copy 0.5%
• CVE-2024-48916 High 8.1 Ceph is vulnerable to authentication bypass through RadosGW 0.2%
• CVE-2025-52555 Medium 6.5 CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS 0.2%