MEDIUM 4.3 NVD

CVE-2026-74248

OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authe

OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected.

References

https://bugs.launchpad.net/octavia/+bug/2161500
https://www.openwall.com/lists/oss-security/2026/08/13/12

Published: 2026-08-14 · Source: NVD · Feed updated: 2026-08-15

This medium severity vulnerability with a CVSS score of 4.3 was published on 2026-08-14 via NVD.

vulnfeed aggregates 10939 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.