CVE-2026-94572 | OpenStack Octavia up to 16.0.x/17.0.0/18.0.0 Amphora provider driver tls_ciphers injection

September 21, 2026 Yanac

A vulnerability, which was classified as very critical, was found in OpenStack Octavia up to 16.0.x/17.0.0/18.0.0. This affects an unknown part of the component Amphora provider driver. Executing a manipulation of the argument tls_ciphers can lead to injection.

This vulnerability is handled as CVE-2026-94572. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More