CVE-2026-93856Published
In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call finds the non-…
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-93856 · Microsoft / collected KEV context
cve-program · CVE-2026-93856
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.