Vulnerabilities

Filters

2 selected

35 records

Sort

Vendor: cilium Component: Cilium Clear all filters

TI-2026-40916 CVE-2026-56743 · GHSA-fm8w-2m5w-9j7r

Incorrect authorization in cilium

LOW 24

Cilium is a networking, observability, and security solution.

CVSS 3.1MEDIUM 5.4 Adjacent network Low privileges No interaction EPSS 0.00248 Published 2026-07-15 Fixed in 1.19.5 CWE-863

TI-2026-40915 CVE-2026-56742 · GHSA-w7c2-w76w-5hmj

Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces

LOW 38

Cilium is a networking, observability, and security solution.

CVSS 3.1HIGH 8.9 Adjacent network Low privileges No interaction EPSS 0.00176 Published 2026-07-15 Fixed in 1.17.17, 1.18.11 +1 CWE-862

TI-2026-36600 CVE-2026-49445 · GHSA-3fcv-jvfp-m4q9

Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access

LOW 39

Cilium is a networking, observability, and security solution.

CVSS 3.1CRITICAL 9.2 Local No auth No interaction EPSS 0.00166 Published 2026-07-15 Fixed in 1.17.14, 1.18.8 +1 CWE-732

TI-2026-30103 CVE-2026-41520 · GHSA-gj49-89wh-h4gj

Cillium exposes sensitive information included in the cilium-bugtool debug archive

LOW 35

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1HIGH 7.9 Local High privileges No interaction EPSS 0.00077 Published 2026-05-08 Fixed in 1.17.15, 1.18.9 +1 CWE-200

TI-2026-26105 CVE-2026-33726 · GHSA-hxv8-4j4r-cqgv

Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic

LOW 24

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1MEDIUM 5.4 Adjacent network Low privileges No interaction EPSS 0.00256 Published 2026-03-27 Fixed in 1.17.14, 1.18.8 +1 CWE-284

TI-2026-21448 CVE-2026-26963 · GHSA-5r23-prx4-mqg3

Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled

LOW 26

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.0014 Published 2026-02-19 Fixed in 1.18.6 CWE-863

TI-2025-40061 CVE-2025-64715 · GHSA-38pp-6gcp-rqvm

Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

LOW 24

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00184 Published 2025-11-29 Fixed in 1.16.17, 1.17.10 +1 CWE-284

TI-2025-23830 CVE-2025-32793 · GHSA-5vxx-c285-pcq4

Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters

LOW 18

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1MEDIUM 4.0 Network No auth No interaction EPSS 0.00142 Published 2025-04-21 Fixed in v1.15.16, v1.16.9 +4 CWE-319

TI-2025-21502 CVE-2025-30163 · GHSA-c6pf-2v8j-96mc

Node based network policies may incorrectly allow workload traffic

LOW 21

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1MEDIUM 4.7 Adjacent network No auth No interaction EPSS 0.0021 Published 2025-03-24 Partial fix · 1.16.8, 1.17.2 CWE-863

TI-2025-21501 CVE-2025-30162 · GHSA-24qp-4xx8-3jvj

East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancers

LOW 19

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1MEDIUM 4.3 Local No auth No interaction EPSS 0.00224 Published 2025-03-24 Partial fix · 1.16.8, 1.17.2 +1 CWE-863

TI-2025-16856 CVE-2025-23047 · GHSA-h78m-j95m-5356

Cilium vulnerable to information leakage via insecure default Hubble UI CORS header

LOW 29

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00489 Published 2025-01-22 Fixed in 1.14.18, 1.15.12 +4 CWE-200

TI-2025-16839 CVE-2025-23028 · GHSA-9m5p-c77c-f9j7

DoS in Cilium agent DNS proxy from crafted DNS responses

LOW 30

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00453 Published 2025-01-22 Fixed in 1.14.18, 1.15.12 +1 CWE-770

TI-2024-35199 CVE-2024-52529 · GHSA-xg58-75qf-9r67

Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in Cilium

LOW 33

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.0052 Published 2024-11-25 Fixed in 1.16.4 CWE-755

TI-2024-32092 CVE-2024-47825 · GHSA-3wwx-63fv-pfq6

CIDR deny policies may not take effect when a more narrow CIDR allow is present

HIGH 71

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00397 Published 2024-10-21 Fixed in 1.15.10, 1.14.16 CWE-276

TI-2024-28454 CVE-2024-42486 · GHSA-vwf8-q6fw-4wcm

Cilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway API

LOW 32

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00573 Published 2024-08-16 Fixed in 1.15.8, 1.16.1 CWE-200

TI-2024-28456 CVE-2024-42488 · GHSA-q7w8-72mr-vpgw

Cilium agent's race condition may lead to policy bypass for Host Firewall policy

LOW 31

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.005 Published 2024-08-15 Fixed in 1.14.14, 1.15.8 CWE-362

TI-2024-28455 CVE-2024-42487 · GHSA-qcm3-7879-xcww

Cilium's Gateway API route matching order contradicts specification

LOW 21

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00535 Published 2024-08-15 Fixed in 1.15.8, 1.16.1 CWE-113

TI-2024-24819 CVE-2024-37307 · GHSA-wh78-7948-358j

Cilium leaks sensitive information in cilium-bugtool

LOW 36

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1HIGH 7.9 Local High privileges No interaction EPSS 0.0018 Published 2024-06-13 Fixed in 1.13.17, 1.14.12 +1 CWE-200

TI-2024-19059 CVE-2024-28860 · GHSA-pwqm-x5x6-5586

Insecure IPsec transport encryption in Cilium

LOW 36

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1HIGH 8.0 Adjacent network No auth No interaction EPSS 0.00172 Published 2024-03-27 Fixed in 1.14.9, 1.15.3 +1 CWE-326

TI-2024-18809 CVE-2024-28250 · GHSA-v6q2-4qr3-5cw6

Cilium has possible unencrypted traffic between nodes when using WireGuard and L7 policies

LOW 26

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.00172 Published 2024-03-18 Fixed in 1.14.8, 1.15.2 CWE-311

TI-2024-18808 CVE-2024-28249 · GHSA-j89h-qrvr-xc36

Cilium has possible unencrypted traffic between nodes when using IPsec and L7 policies

LOW 27

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.00271 Published 2024-03-18 Fixed in 1.13.13, 1.14.8 +1 CWE-311

TI-2024-18807 CVE-2024-28248 · GHSA-68mj-9pjq-mc85

Cilium intermittent HTTP policy bypass

LOW 33

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.0062 Published 2024-03-18 Fixed in 1.13.13, 1.14.8 +1 CWE-693

TI-2024-16859 CVE-2024-25631 · GHSA-x989-52fc-4vr4

Unencrypted traffic between pods when using Wireguard and an external kvstore

LOW 29

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.002 Published 2024-02-20 Fixed in 1.14.7 CWE-311

TI-2024-16858 CVE-2024-25630 · GHSA-7496-fgv9-xw82

Cilium has unencrypted ingress/health traffic when using Wireguard transparent encryption

LOW 26

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.00184 Published 2024-02-20 Fixed in 1.14.7 CWE-311

TI-2023-21932 CVE-2023-41332 · GHSA-24m5-r6hv-ccgp

Denial of service via Kubernetes annotations in specific Cilium configurations

LOW 17

Cilium is a networking, observability, and security solution with an eBPF-based dataplane.

CVSS 3.1LOW 3.5 Adjacent network Low privileges No interaction EPSS 0.00513 Published 2023-09-26 Fixed in 1.14.2, 1.13.7 +1 CWE-755