TI-2024-32092 CVE-2024-47825 · GHSA-3wwx-63fv-pfq6
CIDR deny policies may not take effect when a more narrow CIDR allow is present
Priority HIGH 71
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
cilium
Records40All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9
Exploited now
cilium records in CISA KEVNo cilium vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
40 records
TI-2026-09219 CVE-2026-10722 · GHSA-xhgw-qwwf-pg32
cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow
Priority MEDIUM 55
A vulnerability has been found in cilium ebpf up to 0.21.0.
TI-2023-12305 CVE-2023-27595 · GHSA-r5x6-w42p-jhpp
Cilium eBPF filters may be temporarily removed during agent restart
Priority MEDIUM 43
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
TI-2023-20486 CVE-2023-39347 · GHSA-gj2r-phwg-6rww
Cilium NetworkPolicy bypass via pod labels
Priority MEDIUM 40
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
TI-2022-11721 CVE-2022-29178 · GHSA-6p8v-8cq8-v2r3
Incorrect Default Permissions in Cilium
Priority MEDIUM 40
Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads.
TI-2026-36600 CVE-2026-49445 · GHSA-3fcv-jvfp-m4q9
Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access
Priority LOW 39
Cilium is a networking, observability, and security solution.
TI-2026-40915 CVE-2026-56742 · GHSA-w7c2-w76w-5hmj
Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces
Priority LOW 38
Cilium is a networking, observability, and security solution.
TI-2022-11722 CVE-2022-29179 · GHSA-fmrf-gvjp-5j5g
Improper Privilege Management in Cilium
Priority LOW 38
Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads.
TI-2026-86107 CVE-2026-65960
Tetragon gRPC admin API accessible without authentication from hostNetwork pods
Priority LOW 37
Tetragon is an eBPF-based security observability and runtime enforcement project.
TI-2024-24819 CVE-2024-37307 · GHSA-wh78-7948-358j
Cilium leaks sensitive information in cilium-bugtool
Priority LOW 36
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
TI-2024-19059 CVE-2024-28860 · GHSA-pwqm-x5x6-5586
Insecure IPsec transport encryption in Cilium
Priority LOW 36
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
TI-2023-21933 CVE-2023-41333 · GHSA-4xp2-w642-7mcx
Bypass of namespace restrictions in CiliumNetworkPolicy
Priority LOW 36
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
TI-2026-30103 CVE-2026-41520 · GHSA-gj49-89wh-h4gj
Cillium exposes sensitive information included in the cilium-bugtool debug archive
Priority LOW 35
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
TI-2024-35199 CVE-2024-52529 · GHSA-xg58-75qf-9r67
Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in Cilium
Priority LOW 33
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
TI-2024-18807 CVE-2024-28248 · GHSA-68mj-9pjq-mc85
Cilium intermittent HTTP policy bypass
Priority LOW 33
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
TI-2023-13463 CVE-2023-29002 · GHSA-pg5p-wwp8-97g8
Debug mode leaks confidential data in Cilium
Priority LOW 33
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
TI-2023-12304 CVE-2023-27594 · GHSA-8fg8-jh2h-f2hc
Cilium vulnerable to potential network policy bypass when routing IPv6 traffic
Priority LOW 33
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
TI-2024-28454 CVE-2024-42486 · GHSA-vwf8-q6fw-4wcm
Cilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway API
Priority LOW 32
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
TI-2024-28456 CVE-2024-42488 · GHSA-q7w8-72mr-vpgw
Cilium agent's race condition may lead to policy bypass for Host Firewall policy
Priority LOW 31
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
TI-2026-38905 CVE-2026-53935 · GHSA-q6h5-q3q6-f87x
Incorrect authorization in cilium
Priority LOW 30
Cilium is a networking, observability, and security solution.
TI-2025-30427 CVE-2025-48056 · GHSA-274q-79q9-52j7
Hubble CLI vulnerable to character injection
Priority LOW 30
Hubble is a fully distributed networking and security observability platform for cloud native workloads.
TI-2025-16839 CVE-2025-23028 · GHSA-9m5p-c77c-f9j7
DoS in Cilium agent DNS proxy from crafted DNS responses
Priority LOW 30
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
TI-2025-16856 CVE-2025-23047 · GHSA-h78m-j95m-5356
Cilium vulnerable to information leakage via insecure default Hubble UI CORS header
Priority LOW 29
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
TI-2024-16859 CVE-2024-25631 · GHSA-x989-52fc-4vr4
Unencrypted traffic between pods when using Wireguard and an external kvstore
Priority LOW 29
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
TI-2024-18808 CVE-2024-28249 · GHSA-j89h-qrvr-xc36
Cilium has possible unencrypted traffic between nodes when using IPsec and L7 policies
Priority LOW 27
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.