CVE-2026-55707CWE-863broken-access-control

CVE-2026-55707

published August 5, 2026

CVSS
7.1
EPSS
0%
Percentile
35.9
In the wild
Unconfirmed
What it is

In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets from another project's shared network into their own subnetpool, mutating the victim's subnet state and altering L3 routing and address scope behavior for victim routers.

The record
Technical detail
CVSS
7.1 · NONE
CVSS v4.0
Not supplied
EPSS
0.00427 · 35.9th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-08-05T10:16Z
References (5)
https://launchpad.net/bugs/2152113 · [email protected]https://security.openstack.org/ossa/OSSA-2026-032.html · [email protected]https://www.openwall.com/lists/oss-security/2026/07/29/5 · [email protected]http://www.openwall.com/lists/oss-security/2026/07/29/5 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2026/08/msg00024.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 05 AUG 04:44Z
    In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets
    cvelistv5