ceph vulnerabilities
7 published CVEs name ceph among the affected products.
- 7Published CVEs7 of them scored
- 4Last 12 monthspublished in the last year
- 1Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-54330
Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation
ceph · ceph
High8.1 - CVE-2026-50152
Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users
ceph · ceph
Critical9.1 - CVE-2026-39944
Ceph: CephX AES Authentication error
ceph · ceph
High8.8 - CVE-2025-30156
Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery
ceph · ceph
High8.9 - CVE-2024-47866
RGW DoS attack with empty HTTP header in S3 object copy
ceph · ceph
High7.5 - CVE-2024-48916
Ceph is vulnerable to authentication bypass through RadosGW
ceph · ceph
High8.1 - CVE-2025-52555
CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS
ceph · ceph
Medium6.5