p PatchFirst

CVE-2026-50266

CVE-2026-50266

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device_owner to a value that has "network:" at the beginning ("network:dhcp" for example). The default port RBAC policies incorrectly included PROJECT_MANAGER without requiring network ownership, allowing any project manager to obtain trusted network-service port behavior on shared networks. Depending on backend and deployment, this can bypass anti-spoofing and security group protections, enabling DHCP, MAC, or IP spoofing against other tenants on the shared network. This is a regression of CVE-2015-5240 (OSSA-2015-018).

CVSS 2.2 · Low · EPSS 0.4% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • neutron

    Versions
    • ≥ 25.0.0, < 25.2.4: Affected (semver)
    • ≥ 26.0.0, < 26.0.4: Affected (semver)
    • ≥ 27.0.0, < 27.0.3: Affected (semver)
    • ≥ 28.0.0, < 28.0.1: Affected (semver)

    Update to 25.2.4; Update to 26.0.4; Update to 27.0.3; Update to 28.0.1

  • neutron Debian:13

    Versions
    • 2:26.0.0-9
    • 2:26.0.0-9+deb13u1
    Affected ranges
    • ECOSYSTEM: < 2:26.0.3-0+deb13u2

    Update to 2:26.0.3-0+deb13u2

  • neutron Debian:14

    Versions
    • 2:26.0.0-9
    • 2:27.0.0-1
    • 2:27.0.0~rc1-1
    • 2:27.0.0~rc1-2
    • 2:27.0.1-1
    • 2:27.0.1-2
    • 2:27.0.1-3
    • 2:27.0.1-4
    • 2:27.0.1-5
    • 2:27.0.1-6
    • 2:28.0.0-1
    • 2:28.0.0-2
    • 2:28.0.0-3
    • 2:28.0.0-4
    • 2:28.0.0-5
    • 2:28.0.0-6
    • 2:28.0.0~rc1-1
    • 2:28.0.0~rc1-2
    • 2:28.0.0~rc2-1
    • 2:28.0.0~rc2-2
    Affected ranges
    • ECOSYSTEM: < 2:28.0.0-7

    Update to 2:28.0.0-7

  • neutron PyPI

    Versions
    • 0.0
    • 10.0.5
    • 10.0.6
    • 10.0.7
    • 11.0.3
    • 11.0.4
    • 11.0.5
    • 11.0.6
    • 11.0.7
    • 11.0.8
    • 12.0.0
    • 12.0.0.0b3
    • 12.0.0.0rc1
    • 12.0.0.0rc2
    • 12.0.1
    • 12.0.2
    • 12.0.3
    • 12.0.4
    • 12.0.5
    • 12.0.6
    • 12.1.0
    • 12.1.1
    • 13.0.0
    • 13.0.0.0b1
    • 13.0.0.0b2
    • 13.0.0.0b3
    • 13.0.0.0rc1
    • 13.0.0.0rc2
    • 13.0.1
    • 13.0.2
    • 13.0.3
    • 13.0.4
    • 13.0.5
    • 13.0.6
    • 13.0.7
    • 14.0.0
    • 14.0.0.0b1
    • 14.0.0.0b2
    • 14.0.0.0b3
    • 14.0.0.0rc1
    • 14.0.1
    • 14.0.2
    • 14.0.3
    • 14.0.4
    • 14.1.0
    • 14.2.0
    • 14.3.0
    • 14.3.1
    • 14.4.0
    • 14.4.1
    • 14.4.2
    • 15.0.0
    • 15.0.0.0b1
    • 15.0.0.0rc1
    • 15.0.0.0rc2
    • 15.0.1
    • 15.0.2
    • 15.1.0
    • 15.2.0
    • 15.3.0
    • 15.3.1
    • 15.3.2
    • 15.3.3
    • 15.3.4
    • 16.0.0
    • 16.0.0.0b1
    • 16.0.0.0rc1
    • 16.0.0.0rc2
    • 16.1.0
    • 16.2.0
    • 16.3.0
    • 16.3.1
    • 16.3.2
    • 16.4.0
    • 16.4.1
    • 16.4.2
    • 17.0.0
    • 17.0.0.0rc1
    • 17.0.0.0rc2
    • 17.1.0
    • 17.1.1
    • 17.1.2
    • 17.2.0
    • 17.2.1
    • 17.3.0
    • 17.4.0
    • 17.4.1
    • 18.0.0
    • 18.0.0.0rc1
    • 18.0.0.0rc2
    • 18.1.0
    • 18.1.1
    • 18.2.0
    • 18.3.0
    • 18.4.0
    • 18.5.0
    • 18.6.0
    • 19.0.0
    • 19.0.0.0rc1
    • 19.0.0.0rc2
    • 19.1.0
    • 19.2.0
    • 19.3.0
    • 19.4.0
    • 19.5.0
    • 19.6.0
    • 19.7.0
    • 20.0.0
    • 20.0.0.0rc1
    • 20.0.0.0rc2
    • 20.1.0
    • 20.2.0
    • 20.3.0
    • 20.3.1
    • 20.4.0
    • 20.5.0
    • 21.0.0
    • 21.0.0.0rc1
    • 21.0.0.0rc2
    • 21.1.0
    • 21.1.1
    • 21.1.2
    • 21.2.0
    • 21.2.1
    • 22.0.0
    • 22.0.0.0rc1
    • 22.0.0.0rc2
    • 22.0.1
    • 22.0.2
    • 22.1.0
    • 22.2.0
    • 22.2.1
    • 23.0.0
    • 23.0.0.0b1
    • 23.0.0.0b2
    • 23.0.0.0b3
    • 23.0.0.0rc1
    • 23.0.0.0rc2
    • 23.1.0
    • 23.2.0
    • 23.3.0
    • 23.4.0
    • 23.5.0
    • 24.0.0
    • 24.0.0.0b1
    • 24.0.0.0rc1
    • 24.0.0.0rc2
    • 24.0.1
    • 24.1.0
    • 24.2.0
    • 24.2.1
    • 24.2.2
    • 25.0.0
    • 25.0.0.0b1
    • 25.0.0.0rc1
    • 25.0.0.0rc2
    • 25.1.0
    • 25.2.0
    • 25.2.1
    • 25.2.2
    • 25.2.3
    • 26.0.0
    • 26.0.0.0b1
    • 26.0.0.0b2
    • 26.0.0.0rc1
    • 26.0.0.0rc2
    • 26.0.1
    • 26.0.2
    • 26.0.3
    • 26.0.4
    • 26.0.5
    • 27.0.0
    • 27.0.0.0b1
    • 27.0.0.0rc1
    • 27.0.1
    • 27.0.2
    • 27.0.3
    • 28.0.0
    • 28.0.0.0b1
    • 28.0.0.0b2
    • 28.0.0.0rc1
    • 28.0.0.0rc2
    Affected ranges
    • ECOSYSTEM: < 28.0.1

    Update to 28.0.1

  • neutron Ubuntu:16.04:LTS

    Versions
    • 2:7.0.0-0ubuntu1
    • 2:8.0.0~b1-0ubuntu2
    • 2:8.0.0~b2-0ubuntu4
    • 2:8.0.0~b2-0ubuntu5
    • 2:8.0.0~b2-0ubuntu7
    • 2:8.0.0~b3-0ubuntu1
    • 2:8.0.0~rc1-0ubuntu1
    • 2:8.0.0-0ubuntu1
    • 2:8.1.0-0ubuntu0.16.04.2
    • 2:8.1.2-0ubuntu1
    • 2:8.2.0-0ubuntu1
    • 2:8.3.0-0ubuntu1
    • 2:8.3.0-0ubuntu1.1
    • 2:8.3.0-0ubuntu1.2
    • 2:8.4.0-0ubuntu1
    • 2:8.4.0-0ubuntu2
    • 2:8.4.0-0ubuntu3
    • 2:8.4.0-0ubuntu4
    • 2:8.4.0-0ubuntu5
    • 2:8.4.0-0ubuntu6
    • 2:8.4.0-0ubuntu7.1
    • 2:8.4.0-0ubuntu7.2
    • 2:8.4.0-0ubuntu7.3
    • 2:8.4.0-0ubuntu7.4
    • 2:8.4.0-0ubuntu7.5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • neutron Ubuntu:18.04:LTS

    Versions
    • 2:11.0.1-0ubuntu1
    • 2:12.0.0~b1-0ubuntu1
    • 2:12.0.0~b1-0ubuntu2
    • 2:12.0.0~b2-0ubuntu1
    • 2:12.0.0~b3-0ubuntu1
    • 2:12.0.0~rc1-0ubuntu1
    • 2:12.0.0~rc2-0ubuntu1
    • 2:12.0.0-0ubuntu1
    • 2:12.0.0-0ubuntu1.1
    • 2:12.0.0-0ubuntu1.2
    • 2:12.0.0-0ubuntu1.3
    • 2:12.0.0-0ubuntu1.4
    • 2:12.0.0-0ubuntu2
    • 2:12.0.0-0ubuntu3
    • 2:12.0.1-0ubuntu1
    • 2:12.0.1-0ubuntu1.1
    • 2:12.0.2-0ubuntu1
    • 2:12.0.3-0ubuntu1
    • 2:12.0.5-0ubuntu1
    • 2:12.0.5-0ubuntu4
    • 2:12.0.5-0ubuntu5
    • 2:12.0.6-0ubuntu1
    • 2:12.0.6-0ubuntu2
    • 2:12.0.6-0ubuntu3
    • 2:12.1.0-0ubuntu1
    • 2:12.1.1-0ubuntu1
    • 2:12.1.1-0ubuntu2
    • 2:12.1.1-0ubuntu3
    • 2:12.1.1-0ubuntu4
    • 2:12.1.1-0ubuntu7
    • 2:12.1.1-0ubuntu8
    • 2:12.1.1-0ubuntu8.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • neutron Ubuntu:20.04:LTS

    Versions
    • 2:15.0.0-0ubuntu1
    • 2:16.0.0~b1~git2019121613.3e8abb9a8f-0ubuntu1
    • 2:16.0.0~b2~git2020020712.d5b33ffc77-0ubuntu1
    • 2:16.0.0~b2~git2020020712.d5b33ffc77-0ubuntu3
    • 2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu1
    • 2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu2
    • 2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu3
    • 2:16.0.0~b3~git2020032420.a0e1b5804e-0ubuntu4
    • 2:16.0.0~b3~git2020041013.e74c8f8c88-0ubuntu1
    • 2:16.0.0~b3~git2020041516.5f42488a9a-0ubuntu1
    • 2:16.0.0~b3~git2020041516.5f42488a9a-0ubuntu2
    • 2:16.0.0-0ubuntu0.20.04.1
    • 2:16.0.0-0ubuntu0.20.04.2
    • 2:16.1.0-0ubuntu1
    • 2:16.1.0-0ubuntu2
    • 2:16.2.0-0ubuntu1
    • 2:16.2.0-0ubuntu2
    • 2:16.2.0-0ubuntu3
    • 2:16.3.0-0ubuntu3
    • 2:16.3.1-0ubuntu1
    • 2:16.3.1-0ubuntu1.1
    • 2:16.3.2-0ubuntu2
    • 2:16.3.2-0ubuntu3
    • 2:16.4.0-0ubuntu2
    • 2:16.4.0-0ubuntu3
    • 2:16.4.1-0ubuntu2
    • 2:16.4.2-0ubuntu1
    • 2:16.4.2-0ubuntu2
    • 2:16.4.2-0ubuntu3
    • 2:16.4.2-0ubuntu4
    • 2:16.4.2-0ubuntu5
    • 2:16.4.2-0ubuntu6
    • 2:16.4.2-0ubuntu6.1
    • 2:16.4.2-0ubuntu6.2
    • 2:16.4.2-0ubuntu6.3
    • 2:16.4.2-0ubuntu6.4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • neutron Ubuntu:22.04:LTS

    Versions
    • 2:19.0.0-0ubuntu1
    • 2:19.1.0+git2022030313.b072cbf05f-0ubuntu1
    • 2:20.0.0-0ubuntu1
    • 2:20.0.0-0ubuntu2
    • 2:20.0.0-0ubuntu3
    • 2:20.1.0-0ubuntu2
    • 2:20.2.0-0ubuntu1
    • 2:20.3.0-0ubuntu1
    • 2:20.3.0-0ubuntu1.1
    • 2:20.3.1-0ubuntu1
    • 2:20.4.0-0ubuntu1
    • 2:20.5.0-0ubuntu1
    • 2:20.5.0-0ubuntu2
    • 2:20.5.0-0ubuntu2.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • neutron Ubuntu:24.04:LTS

    Versions
    • 2:23.0.0-0ubuntu1
    • 2:24.0.0~b1+git2024011914.5ce17647-0ubuntu1
    • 2:24.0.0~rc1-0ubuntu2
    • 2:24.0.0-0ubuntu1
    • 2:24.0.0-0ubuntu2
    • 2:24.1.0-0ubuntu1
    • 2:24.1.0-0ubuntu1.1
    • 2:24.1.0-0ubuntu1.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • neutron Ubuntu:25.10

    Versions
    • 2:26.0.0-0ubuntu1
    • 2:26.0.1+git2025070714.71962255de-0ubuntu1
    • 2:26.0.1+git2025070714.71962255de-0ubuntu2
    • 2:27.0.0~rc1-0ubuntu1
    • 2:27.0.0-0ubuntu1
    • 2:27.0.0-0ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • neutron Ubuntu:26.10

    Versions
    • 2:28.0.0-0ubuntu1
    • 2:28.0.0-0ubuntu2
    • 2:29.0.0~b1+git20260818.132.9aaa6fa-0ubuntu1
    • 2:29.0.0~rc1-0ubuntu1
    • 2:29.0.0-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • neutron Ubuntu:26.04:LTS

    Versions
    • 2:27.0.0-0ubuntu1
    • 2:28.0.0~b2+git20260121.28.762694d1bd-0ubuntu1
    • 2:28.0.0~rc1-0ubuntu1
    • 2:28.0.0~rc2-0ubuntu1
    • 2:28.0.0-0ubuntu1
    • 2:28.0.0-0ubuntu1.1
    • 2:28.0.2-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →