{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aopenstackopenstack_network_exporter/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:openstack:openstack_network_exporter:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.4,"id":"CVE-2026-83535"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["openstack-network-exporter"],"_cs_severities":["high"],"_cs_tags":["vulnerability","cloud-security","information-disclosure"],"_cs_type":"advisory","_cs_vendors":["OpenStack"],"content_html":"\u003cp\u003eCVE-2026-83535 is a security vulnerability in the openstack-network-exporter component caused by an insecure fail-open design. When an operator enables user authentication but fails to properly configure or explicitly omits Transport Layer Security (TLS), the authentication mechanism is bypassed silently. This flaw allows attackers on the adjacent network to access highly sensitive dataplane metrics from Open vSwitch (OVS) and Open Virtual Network (OVN) without providing credentials. By querying these endpoints, an unauthorized party can obtain detailed host topology, bridge configurations, active port counters, and internal controller states. This information disclosure provides significant reconnaissance value to an attacker, potentially mapping the internal network structure of a cloud environment to facilitate further exploitation.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability results in unauthorized information disclosure of critical network infrastructure telemetry. Impacted organizations include those running OpenStack environments where network exporters are deployed. Successful exploitation enables adjacent network attackers to map host topology and OVN controller states, potentially revealing details about the internal architecture and traffic patterns of the cloud environment. There is currently no reported impact on system integrity, but the exposure of configuration data serves as a foundation for further network-based attacks.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately audit current openstack-network-exporter deployments to ensure TLS is enforced alongside user authentication.\u003c/li\u003e\n\u003cli\u003eDisable the network-exporter until TLS can be verified and implemented if immediate enforcement is not possible.\u003c/li\u003e\n\u003cli\u003eConfigure host-based firewalls or network access control lists (ACLs) to restrict access to the exporter's listening port to trusted management IPs only.\u003c/li\u003e\n\u003cli\u003eMonitor network traffic logs for unauthorized access attempts to the openstack-network-exporter port, looking for requests that do not include valid authentication headers or originate from unexpected subnets.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-12T20:32:13Z","date_published":"2026-10-12T20:32:13Z","id":"https://feed.craftedsignal.io/briefs/2026-10-openstack-network-exporter-bypass/","summary":"A fail-open vulnerability in openstack-network-exporter allows adjacent network attackers to bypass authentication and exfiltrate sensitive OVS and OVN dataplane metrics when TLS is not properly configured.","title":"CVE-2026-83535 Authentication Bypass in OpenStack Network Exporter","url":"https://feed.craftedsignal.io/briefs/2026-10-openstack-network-exporter-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:openstack:openstack_network_exporter:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}