Octavia

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control characters. The value is written verbatim into…CVE-2026-94572OpenStack · CVSS 9.4 · 0.5% likely

   CWE-94

2. In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redirect_url and redirect_prefix fields. The RFC 3986 URL valida…CVE-2026-94571OpenStack · CVSS 9.4 · 0.5% likely

   CWE-94

3. OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may p…CVE-2026-74248OpenStack · CVSS 4.3 · 0.3% likely

   CWE-863

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.