203187 matches found
CVE-2026-73553
A flaw was found in Envoy. A remote, unauthenticated attacker can exploit this vulnerability to bypass access controls and reach protected backend endpoints. When path parameter stripping is enabled, Envoy strips parameters prior to routing requests but evaluates Role-Based Access Control RBAC...
CVE-2026-73550
A flaw was found in Envoy. An unauthenticated remote attacker can cause a Denial of Service DoS by exhausting system memory and crashing the proxy process. This vulnerability occurs because Envoy fails to count discarded duplicate Host header values against request header size and count limits...
CVE-2026-73552
A flaw was found in Envoy. When evaluating regular expressions in role-based access control RBAC policies, Envoy improperly treats non-UTF-8 characters in HTTP header values as non-matching input. A remote attacker can exploit this flaw by sending requests with specially crafted HTTP headers to...
CVE-2026-73548
A flaw was found in Envoy. This vulnerability allows an unauthenticated remote attacker to cause information disclosure through cross-user response poisoning. By sending request data during a generic HTTP upgrade before the upstream server accepts the connection upgrade, the premature data is...
CVE-2026-73547
A flaw was found in Envoy. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by crashing the Envoy process. When the external authorization filter is configured to modify query parameters, it fails to verify whether a request path header exists before...
CVE-2026-73546
A flaw was found in Envoy. The administrative HTML statistics interface does not properly encode dynamic statistic names before displaying them, leading to a stored cross-site scripting XSS vulnerability. A remote attacker can exploit this by sending crafted requests that cause Envoy to store...
CVE-2026-73513
A flaw was found in Envoy. A malicious upstream server can cause a Denial of Service DoS by sending HTTP/2 response trailers that lack the end-of-stream flag to a proxy configured with the optional oghttp2 codec. This malformed response corrupts the stream state and causes a use-after-free memory...
CVE-2026-73512
A flaw was found in Envoy. A remote attacker can cause a Denial of Service DoS by triggering a use-after-free memory vulnerability in the QUIC HTTP datagram handler. When HTTP/3 datagrams and the Capsule Protocol are enabled, stream recreation events such as internal redirects can leave the handl...
CGA-289H-V7WX-PWR8
Bulletin has no description...
MINI-RGQ7-7GR9-9CW4
Bulletin has no description...
MINI-8QWR-285W-9G82
Bulletin has no description...
MINI-QVHJ-V5HV-HX98
Bulletin has no description...
MINI-4CQ5-75X7-WQ6P
Bulletin has no description...
MINI-3RV2-4PV8-R5XC
Bulletin has no description...
MINI-58H5-GF69-RV6V
Bulletin has no description...
MINI-RPQ4-XCC4-569M
Bulletin has no description...
MINI-C5VP-48VX-6777
Bulletin has no description...
MINI-27V4-69G8-758C
Bulletin has no description...