https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 16:21:04 +0000 https://db.gcve.eu/vuln/cve-2026-74248 <p><strong>Affected:</strong> OpenStack Octavia</p> <p>OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project&#39;s QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected.</p> <p><strong>Affected:</strong> OpenStack Octavia</p> <p>OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project&#39;s QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected.</p> https://db.gcve.eu/vuln/cve-2026-74248 https://db.gcve.eu/vuln/usn-8814-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: octavia, Ubuntu:24.04:LTS: octavia, Ubuntu:26.04:LTS: octavia</p> <p>It was discovered that Octavia did not properly validate TLS cipher string fields in the Amphora provider driver. An authenticated attacker who owns a TLS-enabled load balancer could possibly use this issue to inject arbitrary HAProxy configuration directives. (CVE-2026-94572)</p> <p>It was discovered that Octavia did not properly validate L7 policy redirect URL fields in the Amphora provider driver. An authenticated attacker who owns a load balancer could possibly use this issue to inject arbitrary HAProxy configuration directives. (CVE-2026-94571)</p> <p>It was discovered that Octavia incorrectly handled quality of service policy authorization. An authenticated attacker could possibly use this issue to prevent deletion of another project&#39;s QoS policy. (CVE-2026-74248)</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: octavia, Ubuntu:24.04:LTS: octavia, Ubuntu:26.04:LTS: octavia</p> <p>It was discovered that Octavia did not properly validate TLS cipher string fields in the Amphora provider driver. An authenticated attacker who owns a TLS-enabled load balancer could possibly use this issue to inject arbitrary HAProxy configuration directives. (CVE-2026-94572)</p> <p>It was discovered that Octavia did not properly validate L7 policy redirect URL fields in the Amphora provider driver. An authenticated attacker who owns a load balancer could possibly use this issue to inject arbitrary HAProxy configuration directives. (CVE-2026-94571)</p> <p>It was discovered that Octavia incorrectly handled quality of service policy authorization. An authenticated attacker could possibly use this issue to prevent deletion of another project&#39;s QoS policy. (CVE-2026-74248)</p> https://db.gcve.eu/vuln/usn-8814-1