OpenStack / Octavia
3 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-94572 | openstack-octavia: octavia: HAProxy configuration injection via tls_ciphers on pools and listeners | CRITICAL | 9.4 | Sep 21, 2026 |
| CVE-2026-94571 | openstack-octavia: octavia: HAProxy configuration injection via L7 policy redirect_url and redirect_prefix | CRITICAL | 9.4 | Sep 21, 2026 |
| CVE-2026-74248 | octavia: OpenStack Octavia: Authenticated user can prevent QoS policy deletion | MEDIUM | 4.3 | Aug 14, 2026 |
| CVE-2019-3895 | openstack-tripleo-common: Allows running new amphorae based on arbitrary images | MEDIUM | 5.1 | Jun 3, 2019 |
| CVE-2018-16856 | openstack-octavia: Private keys written to world-readable log files | HIGH | 8.7 | Mar 26, 2019 |
Showing 1 to 3 of 3 CVEs