{"version":"1.0","provider_name":"Yaook","provider_url":"https:\/\/yaook.cloud\/en","author_name":"Sarah G\u00fcnther","author_url":"https:\/\/yaook.cloud\/en\/author\/sarah-guenther\/","title":"security-advisories\/cve-2026-93856 &#187; Yaook","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"R6mKVwp54u\"><a href=\"https:\/\/yaook.cloud\/en\/security-advisories-cve-2026-93856\/\">security-advisories\/cve-2026-93856<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/yaook.cloud\/en\/security-advisories-cve-2026-93856\/embed\/#?secret=R6mKVwp54u\" width=\"600\" height=\"338\" title=\"&#8220;security-advisories\/cve-2026-93856&#8221; &#8212; Yaook\" data-secret=\"R6mKVwp54u\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script>\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n\/\/# sourceURL=https:\/\/yaook.cloud\/wp-includes\/js\/wp-embed.min.js\n<\/script>","description":"YAOOK Security Advisory CVE-2026-93856 Date: 2026-10-20 Upstream advisory: TBA What is CVE-2026-93856 and how does it affect YAOOK? CVE-2026-93856 is a vulnerability in OpenStack cinder which allows an authenticated attacker with the \u201creader\u201d or \u201cmember\u201d role assigned to read Cinder messages from projects where they don\u2019t have permissions. Is my cluster vulnerable? The following images [&hellip;]"}