2662 matches found
Envoy-CPU-Exhaustion-Vulnerability-PoC
Envoy CPU Exhaustion Vulnerability PoC This repository contains a proof-of-concept PoC Python script to demonstrate the CPU exhaustion vulnerability in Envoy caused by a flood of CONTINUATION frames. Author: blackmagic 2024 Description Envoy is a cloud-native, open-source edge and service proxy...
CVE-2023-33869-RCE-PoC
Center for Energy Security and Reliability - UNC Charlotte CVE-2023-33869 is a command injection vulnerability affecting Enphase Envoy firmware version D7.0.88. This vulnerability allows an attacker to inject and execute arbitrary commands with root privileges on the affected device. The Enphase...
CVE-2026-49975-HTTP-2-Bomb
A triage not exploitation tool to identify attack surfaces exposed to CVE-2026-49975 — "HTTP/2 Bomb". ⚠️ This script does not send attack payloads. It only makes normal HTTP requests and analyzes response headers to flag hosts that warrant manual version/patch verification. About CVE-2026-49975...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb PoC HTTP/2 Remote Denial of Service Vulnerability Replication Tool Vulnerability Overview CVE-2026-49975 is an HTTP/2 denial of service vulnerability affecting major web servers. The vulnerability was discovered by security company Calif using OpenAI Codex in early June...
GO-2026-6686 vulnerabilities
Vulnerabilities for packages: neuvector-fips, xeol-fips, envoy-gateway-fips, ctop, neuvector, datadog-agent, chaos-mesh, zarf-fips, newrelic-infrastructure-agent-fips, google-osconfig-agent, docker-fips, cloudbeat-fips, umoci, eks-distro, runc, rancher-agent, k9s-fips,...
CLEANSTART-2026-QS30975 Contour is a Kubernetes ingress controller using Envoy proxy
CVE-2026-50149 affects multiple packages. Contour is a Kubernetes ingress controller using Envoy proxy. See references for individual vulnerability details...
CLEANSTART-2026-CF12718 Contour is a Kubernetes ingress controller using Envoy proxy
CVE-2026-41246 affects multiple packages. Contour is a Kubernetes ingress controller using Envoy proxy. See references for individual vulnerability details...
CVE-2026-108863
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /configdump endpoint to read configured LLM provider API...
CVE-2026-108863 Katanemo Plano through 0.4.37 Missing Authentication on Envoy Admin Interface
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /configdump endpoint to read configured LLM provider API...
CVE-2026-108863 Katanemo Plano through 0.4.37 Missing Authentication on Envoy Admin Interface
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /configdump endpoint to read configured LLM provider API...
CVE-2026-108863
Katanemo Plano versions through 0.4.37 are vulnerable to a missing authentication flaw on the Envoy admin interface , which is bound to all host interfaces on port 9901 . Unauthenticated network attackers can access the /config_dump endpoint to retrieve LLM provider API keys in plaintext from the...
EUVD-2026-97014
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /configdump endpoint to read configured LLM provider API...
PT-2026-110182
🚨 CVE-2026-108863 Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /config dump endpoint to read configured...
CVE-2026-108863: Missing Authentication for Critical Function
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /configdump endpoint to read configured LLM provider API...
CVE-2026-53713
A flaw was found in Envoy Gateway. An authenticated attacker with permissions to submit Lua extension policies can bypass file path restrictions by submitting paths containing redundant slashes. This flaw allows the attacker to read arbitrary files from the gateway controller container, resulting...
BIT-ENVOY-2020-8664
CNCF Envoy through 1.13.0 has incorrect Access Control when using SDS with Combined Validation Context. Using the same secret e.g. trusted CA across many resources together with the combined validation context could lead to the “static” part of the validation context to be not applied, even thoug...
BIT-ENVOY-2020-8661
CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests...
BIT-ENVOY-2020-8659
CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small i.e. 1 byte chunks...
GO-2026-6597 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, kube-mgmt-fips, chaos-mesh, cloudbeat-fips, grype, k9s-fips, gitlab-rails-ce-fips, tigera-operator-fips, wolfictl, docker-compose, chainctl, buildkitd, helm-push, kubescape, headlamp, consul-k8s, tracee, envoy-gateway, trivy-operator,...
SUSE CVE-2022-29224
Envoy is a cloud-native high-performance proxy. Versions of envoy prior to 1.22.1 are subject to a segmentation fault in the GrpcHealthCheckerImpl. Envoy can perform various types of upstream health checking. One of them uses gRPC. Envoy also has a feature which can "hold" prevent removal upstrea...