| CVE-2026-55707 |
In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets
|
7.1
High
|
Aug 5, 2026 |
| CVE-2026-50266 |
In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another…
|
2.2
Low
|
Jun 4, 2026 |
| CVE-2026-49299 |
In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write…
|
5.3
Medium
|
May 28, 2026 |
| CVE-2024-53916 |
In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement
|
7.5
High
|
Nov 24, 2024 |