Known vulnerabilities in OpenStack Octavia
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-94572 | In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field… | 9.4 Critical | Sep 21, 2026 |
| CVE-2026-94571 | In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy… | 9.4 Critical | Sep 21, 2026 |
| CVE-2026-74248 | OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization | 4.3 Medium | Aug 14, 2026 |