https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 20:08:11 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-55707 <p>In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets from another project&#39;s shared network into their own subnetpool, mutating the victim&#39;s subnet state and altering L3 routing and address scope behavior for victim routers.</p> <p>In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets from another project&#39;s shared network into their own subnetpool, mutating the victim&#39;s subnet state and altering L3 routing and address scope behavior for victim routers.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-55707 https://vulnerability.circl.lu/vuln/ghsa-v5q5-3vcq-49r5 <p>In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets from another project&#39;s shared network into their own subnetpool, mutating the victim&#39;s subnet state and altering L3 routing and address scope behavior for victim routers.</p> <p>In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets from another project&#39;s shared network into their own subnetpool, mutating the victim&#39;s subnet state and altering L3 routing and address scope behavior for victim routers.</p> https://vulnerability.circl.lu/vuln/ghsa-v5q5-3vcq-49r5 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-55707 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: neutron, Ubuntu:18.04:LTS: neutron, Ubuntu:20.04:LTS: neutron, Ubuntu:22.04:LTS: neutron, Ubuntu:24.04:LTS: neutron, Ubuntu:26.04:LTS: neutron</p> <p>In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets from another project&#39;s shared network into their own subnetpool, mutating the victim&#39;s subnet state and altering L3 routing and address scope behavior for victim routers.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: neutron, Ubuntu:18.04:LTS: neutron, Ubuntu:20.04:LTS: neutron, Ubuntu:22.04:LTS: neutron, Ubuntu:24.04:LTS: neutron, Ubuntu:26.04:LTS: neutron</p> <p>In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets from another project&#39;s shared network into their own subnetpool, mutating the victim&#39;s subnet state and altering L3 routing and address scope behavior for victim routers.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-55707