Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Ceph — Vulnerabilities & Security Advisories 33

All 33 CVE vulnerabilities found in Ceph, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerabilities specifically associated with Ceph, a distributed storage system originally developed by Red Hat and now maintained by the Linux Foundation. It collects security weaknesses across multiple weakness classes, including memory corruption, access control flaws, and injection issues, covering advisories released over the past several years. Readers can use this aggregation to track the vendor’s advisory history, analyze patterns within specific weakness categories, or review the cumulative vulnerability record for the Ceph product line without needing to navigate individual CVE entries separately.

Vendor: Red Hat

CVE ID Title CVSS Severity Published
CVE-2026-54330 Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation CWE-347 8.1 High 2026-08-27
CVE-2026-50152 Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users CWE-285 9.1 Critical 2026-08-27
CVE-2026-39944 Ceph: CephX AES Authentication error CWE-327 8.8 High 2026-08-27
CVE-2025-30156 Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery CWE-327 8.9 High 2026-08-27
CVE-2024-47866 RGW DoS attack with empty HTTP header in S3 object copy CWE-20 7.5 High 2025-11-12
CVE-2024-48916 Ceph is vulnerable to authentication bypass through RadosGW CWE-345 8.1 High 2025-07-30
CVE-2025-52555 CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS CWE-269 6.5 Medium 2025-06-26
CVE-2022-3854 Red Hat Ceph 安全漏洞 CWE-177 6.5 - 2023-03-06
CVE-2022-3650 Red Hat Ceph 安全漏洞 CWE-842 7.8 - 2023-01-17
CVE-2021-3979 Red Hat Ceph Storage 授权问题漏洞 CWE-327 4.0 - 2022-08-25
CVE-2022-0670 Red Hat Ceph 安全漏洞 CWE-863 8.1 - 2022-07-25
CVE-2021-3531 Red Hat Ceph 输入验证错误漏洞 CWE-20 5.3 - 2021-05-18
CVE-2021-3524 Red Hat Ceph Storage 注入漏洞 CWE-20 6.5 - 2021-05-17
CVE-2021-20288 红帽 Red Hat Ceph 授权问题漏洞 CWE-287 9.8 - 2021-04-15
CVE-2020-25678 部分Red Hat产品 安全漏洞 CWE-312 5.5 - 2021-01-08
CVE-2020-27781 OpenStack 安全漏洞 CWE-522 7.8 - 2020-12-18
CVE-2020-25660 Red Hat Ceph 安全漏洞 CWE-294 7.5 - 2020-11-23
CVE-2020-10736 Red Hat Ceph 安全漏洞 CWE-285 8.0 High 2020-06-22
CVE-2020-1760 Red Hat Ceph Object Gateway 跨站脚本漏洞 CWE-79 5.8 Medium 2020-04-23
CVE-2020-1699 Red Hat Ceph Storage Ceph仪表板路径遍历漏洞 CWE-200 7.5 High 2020-04-21
CVE-2020-1759 多款Red Hat产品安全特征问题漏洞 CWE-323 6.4 Medium 2020-04-13
CVE-2020-1700 Ceph RGW Beast 资源管理错误漏洞 CWE-400 6.5 Medium 2020-02-07
CVE-2019-10222 Red Hat Ceph 资源管理错误漏洞 CWE-755 7.5 - 2019-11-08
CVE-2019-3821 Red Hat ceph 资源管理错误漏洞 CWE-772 7.5 - 2019-03-27
CVE-2018-16889 debug 日志信息泄露漏洞 CWE-532 7.5 - 2019-01-28
CVE-2018-14662 Red Hat Ceph 信息泄露漏洞 CWE-285 5.7 - 2019-01-15
CVE-2018-16846 Red Hat Ceph 输入验证错误漏洞 CWE-770 6.5 - 2019-01-15
CVE-2016-9579 Ceph 输入验证错误漏洞 CWE-20 7.5 - 2018-08-01
CVE-2016-8626 Red Hat Ceph 输入验证漏洞 CWE-476 6.5 - 2018-07-31
CVE-2017-7519 Red Hat Ceph 格式化字符串漏洞 CWE-134 4.4 - 2018-07-27

All 33 known CVE vulnerabilities affecting Ceph with full Chinese analysis, references, and POCs where available.