Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled

🗓️ 19 Feb 2026 19:39:01Reported by GitHub Advisory DatabaseType

Cilium may bypass firewall policies when Native Routing, WireGuard, and Node Encryption are enabled.

Reporter	Title	Published	Views	Family All 124
ATTACKERKB	CVE-2026-26963	19 Feb 202623:38	–	attackerkb
CNNVD	Cilium 安全漏洞	20 Feb 202600:00	–	cnnvd
CVE	CVE-2026-26963	19 Feb 202623:38	–	cve
Cvelist	CVE-2026-26963 Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled	19 Feb 202623:38	–	cvelist
NVD	CVE-2026-26963	20 Feb 202600:16	–	nvd
OSV	BIT-CILIUM-2026-26963 Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled	21 Feb 202608:36	–	osv
OSV	BIT-CILIUM-OPERATOR-2026-26963 Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled	21 Feb 202608:36	–	osv
OSV	BIT-HUBBLE-RELAY-2026-26963 Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled	21 Feb 202608:40	–	osv
OSV	CVE-2026-26963 Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled	19 Feb 202623:38	–	osv
OSV	GHSA-5R23-PRX4-MQG3 Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled	19 Feb 202619:39	–	osv

Vulners

Node

cilium ciliumRange1.18.0–1.18.5go

Source	Link
github	www.github.com/cilium/cilium/security/advisories/GHSA-5r23-prx4-mqg3
github	www.github.com/cilium/cilium/pull/42892
github	www.github.com/cilium/cilium/commit/88e28e1e62c0b1a02c3f0fc22d888ac9eefbe885
github	www.github.com/cilium/cilium/releases/tag/v1.18.6
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-26963
github	www.github.com/advisories/GHSA-5r23-prx4-mqg3

20 Feb 2026 16:46Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.15.4 - 6.1

EPSS0.00006

SSVC