RGW STS session tokens
by Ceph
CVEs (1)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-39944 | imp | 0.55 | 8.5 | — | Aug 19, 2026 | ceph: ceph: RGW STS session tokens vulnerable to CBC bit-flip attack enabling admin privilege escalation |
- risk 0.55cvss 8.5epss —
ceph: ceph: RGW STS session tokens vulnerable to CBC bit-flip attack enabling admin privilege escalation