Login Request a demo
NE
Product
Neutron
by OpenStack · last CVE Aug 5, 2026
28
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities28In the news0Timeline
Severity mix
Critical 2High 4Medium 9Low 1
Severity
All severities28Critical2High4Medium9Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Neutron to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-3277
6.5
1%
Mar 6
An uncontrolled resource consumption flaw was found in openstack-neutron
Affected: before 18.6.0; 19.0.0 before 19.5.0
CVE-2021-40797
6.5
2%
Sep 8
An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1
Affected: before 16.4.1; 17.0.0 before 17.2.1; 18.0.0 before 18.1.1
CVE-2021-40085
6.5
2%
Aug 31
An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1
Affected: before 16.4.1; 17.0.0 before 17.2.1; 18.0.0 before 18.1.1
CVE-2019-10876
6.5
2%
Apr 5
An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3
Affected: 11.0.0 before 11.0.7; 12.0.0 before 12.0.6; 13.0.0 before 13.0.3
CVE-2019-9735
6.5
4%
Mar 13
An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3
Affected: before 10.0.8; 11.0.0 before 11.0.7; 12.0.0 before 12.0.6; 13.0.0 before 13.0.3
CVE-2018-14635
6.5
3%
Sep 10
When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation
Affected: 11.0.0 through 11.0.5; 12.0.0 through 12.0.3; 13.0.0.0
CVE-2017-7543
5.9
2%
Jul 26
A race-condition flaw was discovered in openstack-neutron before 7.2.0-12.1, 8.x before 8.3.0-11.1, 9.x before 9.3.1-2.1, and 10.x before 10.0.2-1.1, where, following a minor…
Affected: 7.0.0 before 7.2.0-12.1; 8.0.0 before 8.3.0-11.1; 9.0.0 before 9.3.1-2.1; 10.0.0 before 10.0.2-1.1
CVE-2026-49299
5.3
0%
May 28
In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names
Affected: 26.0.0 before 26.0.4; 27.0.0 before 27.0.3; 28.0.0 before 28.0.1
CVE-2018-14636
5.3
1%
Sep 10
Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor
Affected: 7.0.0 through 11.0.4; 12.0.0 through 12.0.2; 13.0.0
Showing 9