Denial of Service Vulnerability in OpenStack Network Exporter by Red Hat
CVE-2026-83536

5.3MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Openstack Platform 18.0
Vendor
CVE Published:
12 October 2026

What is CVE-2026-83536?

A vulnerability exists in OpenStack Network Exporter due to improper HTTP server configuration, specifically the absence of crucial timeout settings like ReadHeaderTimeout. This flaw allows an unauthenticated remote attacker to exploit the server by establishing multiple slow HTTP header connections. By sending header bytes slowly, attackers can deplete server resources, particularly file descriptors, resulting in a Denial of Service that disrupts the legitimate scraping and alerting of Prometheus metrics.

References

https://access.redhat.com/security/cve/CVE-2026-83536
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2526401
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.