CVE-2026-55707
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets from another project's shared network into their own subnetpool, mutating the victim's subnet state and altering L3 routing and address scope behavior for victim routers.
| CWE | CWE-863 |
| Vendor | openstack |
| Product | neutron |
| Published | Aug 5, 2026 |
| Last Updated | Aug 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for openstack neutron
Be the first to know when new unknown vulnerabilities affecting openstack neutron are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
OpenStack / Neutron
14.0.0 < 26.0.6 27.0.0 < 27.0.4 28.0.0 < 28.0.2