OpenStack Octavia vulnerabilities

3 published CVEs name OpenStack Octavia among the affected products.

Critical 2High 0Medium 1Low 0Not scored 0

Newest CVEs

CVE-2026-94572
In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control characters. The value is…
OpenStack · Octavia
Critical9.4
CVE-2026-94571
In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redirect_url and redirect_prefix fields. The…
OpenStack · Octavia
Critical9.4
CVE-2026-74248
OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an…
OpenStack · Octavia
Medium4.3