[CVE-2026-55707 ] Published: Jul 29, 2026, 3:00:00 PM UTC
In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets from another project's shared network into
High(7.1) Affected Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Affected · Fixed: 2:26.0.3-0+deb13u3
nvd · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Affected · Fixed: 2:26.0.3-0+deb13u3
nvd · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Affected · Fixed: 2:26.0.3-0+deb13u3
nvd · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:26.0.3-0+deb13u3
nvd · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:26.0.3-0+deb13u3
nvd · neutron · debian · 13
[CVE-2021-40797 ] Published: Sep 8, 2021, 12:00:00 AM UTC
neutron: CVE-2021-40797
Medium(6.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:02:32 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:19.0.0-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:19.0.0-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2:19.0.0-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:19.0.0-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:19.0.0-1
dsa · neutron · debian · 13
[CVE-2021-40085 ] Published: Aug 31, 2021, 12:00:00 AM UTC
neutron: CVE-2021-40085
High(8) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:02:21 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:18.1.0-3
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:18.1.0-3
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2:18.1.0-3
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:18.1.0-3
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:18.1.0-3
dsa · neutron · debian · 13
[CVE-2021-38598 ] Published: Aug 10, 2021, 12:00:00 AM UTC
neutron: CVE-2021-38598
Medium(5.9) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:01:53 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:18.1.0-2
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:18.1.0-2
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2:18.1.0-2
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:18.1.0-2
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:18.1.0-2
dsa · neutron · debian · 13
[CVE-2021-20267 ] Published: Jan 1, 2021, 12:00:00 AM UTC
neutron: CVE-2021-20267
High(7.1) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:54:16 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:17.1.1-5
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:17.1.1-5
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2:17.1.1-5
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:17.1.1-5
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:17.1.1-5
dsa · neutron · debian · 13
[CVE-2019-9735 ] Published: Mar 3, 2019, 12:00:00 AM UTC
neutron: CVE-2019-9735
High(7.7) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:45:30 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:13.0.2-13
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:13.0.2-13
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2:13.0.2-13
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:13.0.2-13
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:13.0.2-13
dsa · neutron · debian · 13
[CVE-2019-10876 ] Published: Feb 28, 2019, 12:00:00 AM UTC
neutron: CVE-2019-10876
High(7.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:38:28 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:13.0.2-15
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:13.0.2-15
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2:13.0.2-15
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:13.0.2-15
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:13.0.2-15
dsa · neutron · debian · 13
[CVE-2018-14636 ] Published: Apr 27, 2018, 12:00:00 AM UTC
neutron: CVE-2018-14636
Medium(5.3) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:34:48 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:13.0.0-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:13.0.0-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2:13.0.0-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:13.0.0-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:13.0.0-1
dsa · neutron · debian · 13
[CVE-2018-14635 ] Published: Mar 21, 2018, 12:00:00 AM UTC
neutron: CVE-2018-14635
Medium(6.5) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:34:48 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:13.0.0-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:13.0.0-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2:13.0.0-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:13.0.0-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:13.0.0-1
dsa · neutron · debian · 13
[CVE-2016-5362 ] Published: Mar 29, 2016, 12:00:00 AM UTC
neutron: CVE-2016-5362
High(8.2) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:22:18 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:8.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:8.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2:8.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:8.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:8.1.2-1
dsa · neutron · debian · 13
[CVE-2016-5363 ] Published: Mar 29, 2016, 12:00:00 AM UTC
neutron: CVE-2016-5363
High(8.2) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:22:18 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:8.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:8.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2:8.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:8.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:8.1.2-1
dsa · neutron · debian · 13
[CVE-2015-8914 ] Published: Dec 15, 2015, 12:00:00 AM UTC
neutron: CVE-2015-8914
Medium(6.3) Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:17:39 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:8.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2:8.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2:8.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:8.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2:8.1.2-1
dsa · neutron · debian · 13
[CVE-2015-5240 ] Published: Sep 8, 2015, 12:00:00 AM UTC
neutron: CVE-2015-5240
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:15:40 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 1:7.0.0-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 1:7.0.0-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 1:7.0.0-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 1:7.0.0-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 1:7.0.0-1
dsa · neutron · debian · 13
[CVE-2015-3221 ] Published: Aug 24, 2015, 8:12:31 PM UTC
neutron: CVE-2015-3221
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:14:53 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2015.1.0+2015.06.24.git61.bdf194a0e1-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2015.1.0+2015.06.24.git61.bdf194a0e1-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2015.1.0+2015.06.24.git61.bdf194a0e1-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2015.1.0+2015.06.24.git61.bdf194a0e1-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2015.1.0+2015.06.24.git61.bdf194a0e1-1
dsa · neutron · debian · 13
[CVE-2014-7821 ] Published: Nov 19, 2014, 12:00:00 AM UTC
neutron: CVE-2014-7821
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:11:42 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2014.1.3-6
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2014.1.3-6
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2014.1.3-6
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2014.1.3-6
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2014.1.3-6
dsa · neutron · debian · 13
[CVE-2014-6414 ] Published: Aug 15, 2014, 12:00:00 AM UTC
neutron: CVE-2014-6414
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:11:34 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2014.1.3-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2014.1.3-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2014.1.3-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2014.1.3-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2014.1.3-1
dsa · neutron · debian · 13
[CVE-2014-3555 ] Published: Jul 21, 2014, 12:00:00 AM UTC
neutron: CVE-2014-3555
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:10:39 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2014.1.1-3
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2014.1.1-3
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2014.1.1-3
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2014.1.1-3
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2014.1.1-3
dsa · neutron · debian · 13
[CVE-2013-6433 ] Published: May 29, 2014, 8:15:59 PM UTC
neutron: CVE-2013-6433
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:09:15 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2014.1-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2014.1-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2014.1-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2014.1-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2014.1-1
dsa · neutron · debian · 13
[CVE-2014-4615 ] Published: May 20, 2014, 12:00:00 AM UTC
ceilometer: CVE-2014-4615
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:11:15 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2014.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2014.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2014.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2014.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2014.1.2-1
dsa · neutron · debian · 13
[CVE-2014-0187 ] Published: Apr 22, 2014, 12:00:00 AM UTC
neutron: CVE-2014-0187
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:09:51 PM UTC
Details (5) 2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2014.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie
Fixed · Fixed: 2014.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u2 · all · trixie-security · Historical version
Fixed · Fixed: 2014.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2014.1.2-1
dsa · neutron · debian · 13
2:26.0.3-0+deb13u3 · all · trixie-security
Fixed · Fixed: 2014.1.2-1
dsa · neutron · debian · 13