OC
Product
Octavia
5
CVEs
0
On KEV
9.4
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 1Low 0
Watch
Add Octavia to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-94572 | 9.4 | Sep 21 | In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control characters Affected: 6.0.0 before 16.1.0; 17.0.0 before 17.0.1; 18.0.0 before 18.0.1 |
| CVE-2026-94571 | 9.4 | Sep 21 | In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redirect_url and redirect_prefix fields Affected: 0.8.0 before 16.1.0; 17.0.0 before 17.0.1; 18.0.0 before 18.0.1 |
Showing 2