Advisories · Technology

ceph.

Every CVE that names ceph among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-54330 CVE record

CVSS 8.1 High

Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation
- ceph
- Weak cryptography or TLS
Not analysed yet 27 Aug 2026
CVE-2026-50152 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users
- ceph
- Broken access control
Not analysed yet 27 Aug 2026
CVE-2026-39944 CVE record

CVSS 8.8 High

Ceph: CephX AES Authentication error
- ceph
- Weak cryptography or TLS
Not analysed yet 27 Aug 2026
CVE-2025-30156 CVE record

CVSS 8.9 High

Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery
- ceph
- Weak cryptography or TLS
Not analysed yet 27 Aug 2026
CVE-2024-47866 CVE record

CVSS 7.5 High

RGW DoS attack with empty HTTP header in S3 object copy
- ceph
- CWE-20
Not analysed yet 12 Nov 2025
CVE-2024-48916 CVE record

CVSS 8.1 High

Ceph is vulnerable to authentication bypass through RadosGW
- ceph
- CWE-345
Not analysed yet 30 Jul 2025
CVE-2025-52555 CVE record

CVSS 6.5 Medium

CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS
- ceph
- Privilege escalation
Not analysed yet 26 Jun 2025
CVE-2022-3854 CVE record

CVSS 6.5 Medium

A flaw was found in Ceph, relating to the URL processing on RGW backends.
- ceph
- CWE-177
Not analysed yet 6 Mar 2023
CVE-2022-3650 CVE record

A privilege escalation flaw was found in Ceph.
- Ceph
- CWE-842
Not analysed yet 17 Jan 2023
CVE-2021-3979 CVE record

Broken or risky cryptographic algorithm in ceph
- ceph
- Weak cryptography or TLS
Not analysed yet 25 Aug 2022
CVE-2022-0670 CVE record

Incorrect authorization in Ceph
- Ceph
- Broken access control
Not analysed yet 25 Jul 2022
CVE-2021-3531 CVE record

Improper input validation in ceph
- ceph
- CWE-20
Not analysed yet 18 May 2021
CVE-2021-3524 CVE record

Improper input validation in ceph
- ceph
- CWE-20
Not analysed yet 17 May 2021
CVE-2021-20288 CVE record

Improper authentication in ceph
- ceph
- Authentication bypass
Not analysed yet 15 Apr 2021
CVE-2020-25678 CVE record

Cleartext storage of sensitive information in ceph
- ceph
- Information disclosure
Not analysed yet 8 Jan 2021
CVE-2020-27781 CVE record

Insufficiently protected credentials in Ceph
- Ceph
- Hard-coded credentials
Not analysed yet 18 Dec 2020
CVE-2020-25660 CVE record

Authentication bypass by replay in ceph
- ceph
- Authentication bypass
Not analysed yet 23 Nov 2020
CVE-2020-1699 CVE record

CVSS 7.5 High

Information disclosure in ceph
- ceph
- Information disclosure
Not analysed yet 21 Apr 2020
CVE-2020-1759 CVE record

CVSS 6.4 Medium

ceph: A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container…
- ceph
- CWE-323
Not analysed yet 13 Apr 2020
CVE-2019-10222 CVE record

CVSS 7.5 High

Improper handling of exceptional conditions in ceph
- ceph
- CWE-755
Not analysed yet 8 Nov 2019
CVE-2018-16889 CVE record

CVSS 5.5 Medium

Sensitive information in log files in ceph
- ceph
- Information disclosure
Not analysed yet 28 Jan 2019