PT-2026-56051

Name of the Vulnerable Software and Affected Versions Cilium versions 1.19.0 through 1.19.1 Cilium versions 1.18.0 through 1.18.7 Cilium versions prior to 1.17.14 Description When L7 functionality is enabled, the Envoy instance creates a world-accessible socket on cluster nodes. A local attacker...

PT-2026-56056

Name of the Vulnerable Software and Affected Versions Cilium versions 1.19.0 through 1.19.3 Cilium versions 1.18.2 through 1.18.9 Cilium versions prior to 1.17.16 Description Users capable of creating CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs using the addressMatcher parameter...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb, opentelemetry-collector, frankenphp-8.4, spire-server, vault, external-dns, kyverno-fips, kine, argocd-image-updater, seaweedfs-rocksdb-fips, flux-source-controller, cilium-cli, etcd, argo-cd, flux-fips, prometheus-elasticsearch-exporter, zot,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb, opentelemetry-collector, frankenphp-8.4, spire-server, vault, external-dns, kyverno-fips, kine, argocd-image-updater, seaweedfs-rocksdb-fips, flux-source-controller, cilium-cli, etcd, argo-cd, flux-fips, prometheus-elasticsearch-exporter, zot,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, frankenphp-8.4, spire-server, vault, buildah, external-dns, kyverno-fips, kine, cilium-cli, buildah-fips, etcd, argo-cd, prometheus-elasticsearch-exporter, zot, external-secrets-operator, vault-fips, kube-conformance, reports-server, minio,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, frankenphp-8.4, spire-server, vault, buildah, external-dns, kyverno-fips, kine, cilium-cli, buildah-fips, etcd, argo-cd, prometheus-elasticsearch-exporter, zot, packer-fips, external-secrets-operator, vault-fips, kube-conformance,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: k9s, cilium, argo-cd, telegraf, kots, chisel, cilium-cli, k8sgpt, gptscript, pulumi-language-dotnet, splunk-otel-collector, fscrypt, go-discover, aactl, eksctl, cosign, ko, wolfictl, steampipe, step-issuer, gatus, terragrunt, prometheus, istio, buildkitd, tkn,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: gitlab-kas, k9s, cilium, argocd-image-updater, gitea, telegraf, kots, chisel, cilium-cli, osv-scanner, zarf, minio, k3s, snyk-cli, fscrypt, kubescape, aactl, flux-image-automation-controller, kubernetes, skaffold, kaf, trivy-operator, kine, prometheus, containerd,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: gitlab-kas, k9s, cilium, argocd-image-updater, gitea, telegraf, kots, chisel, cilium-cli, osv-scanner, zarf, minio, k3s, snyk-cli, fscrypt, kubescape, docker-machine-driver-harvester, aactl, flux-image-automation-controller, kubernetes, skaffold, kaf, trivy-operator,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: gitlab-kas, k9s, cilium, splunk-otel-collector, argocd-image-updater, argo-cd, gitea, telegraf, pulumi, kots, scorecard, guac, cilium-cli, osv-scanner, zarf, minio, chezmoi, gptscript, argo-events, k3s, pulumi-language-dotnet, datadog-agent, pulumi-language-java,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: gitlab-kas, cilium, telegraf, kots, cilium-cli, minio, k3s, snyk-cli, fscrypt, aactl, kubernetes, podman, kaf, buildah, kine, prometheus, containerd, istio, kubernetes-dashboard, docker-cli-buildx, zot, cert-manager, mattermost, knative-serving, prometheus-operator,...

GO-2026-5400 Cillium exposes sensitive information included in the cilium-bugtool debug archive in github.com/cilium/cilium

Cillium exposes sensitive information included in the cilium-bugtool debug archive in github.com/cilium/cilium...

CVE-2026-52945

In the Linux kernel, the following vulnerability has been resolved: Revert "wireguard: device: enable threaded NAPI" This reverts commit 933466fc50a8e4eb167acbd0d8ec96a078462e9c which is commit db9ae3b6b43c79b1ba87eea849fd65efa05b4b2e upstream. We have had three independent production user report...

CVE-2026-52945

The CVE-2026-52945 entry describes a Linux kernel vulnerability in the WireGuard component where enabling threaded NAPI can cause the decryption path for a WireGuard peer to stall under heavy network load (notably with Cilium), effectively causing a DoS for that peer while other peers remain func...

CVE-2026-52945 Revert "wireguard: device: enable threaded NAPI"

In the Linux kernel, the following vulnerability has been resolved: Revert "wireguard: device: enable threaded NAPI" This reverts commit 933466fc50a8e4eb167acbd0d8ec96a078462e9c which is commit db9ae3b6b43c79b1ba87eea849fd65efa05b4b2e upstream. We have had three independent production user report...

SUSE CVE-2026-10722

A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a...

Linux Distros Unpatched Vulnerability : CVE-2026-10722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component...

CVE-2026-10722

A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a...

DEBIAN-CVE-2026-10722

A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a...

CVE-2026-10722

A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a...