CVE-2026-33726

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.14, 1.18.8, and 1.19.2, Ingress Network Policies are not enforced for traffic from pods to L7 Services Envoy, GAMMA with a local backend on the same node, when Per-Endpoint Routing is...

SUSE CVE-2026-33726

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.14, 1.18.8, and 1.19.2, Ingress Network Policies are not enforced for traffic from pods to L7 Services Envoy, GAMMA with a local backend on the same node, when Per-Endpoint Routing is...

CVE-2026-33726

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.14, 1.18.8, and 1.19.2, Ingress Network Policies are not enforced for traffic from pods to L7 Services Envoy, GAMMA with a local backend on the same node, when Per-Endpoint Routing is...

CVE-2026-33726 Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.14, 1.18.8, and 1.19.2, Ingress Network Policies are not enforced for traffic from pods to L7 Services Envoy, GAMMA with a local backend on the same node, when Per-Endpoint Routing is...

CVE-2026-33726

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.14, 1.18.8, and 1.19.2, Ingress Network Policies are not enforced for traffic from pods to L7 Services Envoy, GAMMA with a local backend on the same node, when Per-Endpoint Routing is...

CVE-2026-33726 Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.14, 1.18.8, and 1.19.2, Ingress Network Policies are not enforced for traffic from pods to L7 Services Envoy, GAMMA with a local backend on the same node, when Per-Endpoint Routing is...

PT-2026-28513

Name of the Vulnerable Software and Affected Versions Cilium versions prior to 1.17.14 Cilium versions 1.18.0 through 1.18.7 Cilium versions 1.19.0 through 1.19.1 Description Cilium is a networking, observability, and security solution utilizing an eBPF-based dataplane. Ingress Network Policies a...

PHPIPAM SQL Injection Vulnerability

phpIPAM is an open-source IP address management application IPAM based on PHP and MySQL. Versions of phpipam 1.7.4 and earlier have a SQL injection vulnerability. This vulnerability stems from incorrect handling of parameters in the file app/admin/sections/edit-result.php, specifically the...

django-allauth-d120 (0.0.3), meine-stadt-transparent (0.2.4) +6 more potentially affected by CVE-2026-27982 via django-allauth (0.41.0)

django-allauth PYPI version 0.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - django-allauth-d120 0.0.3 - meine-stadt-transparent 0.2.4 - oms-cms 0.9.9 - openwisp-ipam 0.1.0 - openwisp-network-topology =0.3.0,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: confluent-cp-docker-utils, pulumi-language-java, wazero, kube-rbac-proxy, kwok, aws-eks-pod-identity-agent, terraform-provider-acme, rancher-fleet, minio-operator, cert-manager-cmctl, terraform-mcp-server, cfssl, kube-state-metrics, sqlexporter, podinfo,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, kube-rbac-proxy, kwok, aws-eks-pod-identity-agent, terraform-provider-acme, rancher-fleet, minio-operator, cert-manager-cmctl, terraform-mcp-server, cfssl, kube-state-metrics, sqlexporter, podinfo, kyverno-policy-reporter, nats-top,...

django-allauth-d120 (0.0.3), meine-stadt-transparent (0.2.4) +6 more potentially affected by CVE-2025-65431 via django-allauth (0.41.0)

django-allauth PYPI version 0.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - django-allauth-d120 0.0.3 - meine-stadt-transparent 0.2.4 - oms-cms 0.9.9 - openwisp-ipam 0.1.0 - openwisp-network-topology =0.3.0,...

CVE-2025-67499 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, calico-fips, flannel-fips, rootlesskit-fips, nerdctl-fips, k3s, containerd, nerdctl, amazon-k8s-cni-fips, azure-ipam, istio, kuma, multus-cni-fips, buildkitd-fips, flannel, rootlesskit, containerd-fips, buildah, istio-fips, podman, buildkitd,...

GHSA-JV3W-X3R3-G6RM vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, calico-fips, flannel-fips, rootlesskit-fips, nerdctl-fips, k3s, containerd, nerdctl, amazon-k8s-cni-fips, azure-ipam, istio, kuma, multus-cni-fips, buildkitd-fips, flannel, rootlesskit, containerd-fips, buildah, istio-fips, podman, buildkitd,...

CVE-2025-67499 vulnerabilities

Vulnerabilities for packages: datadog-agent, docker, podman, calico, k3s, istio, flannel, nerdctl, kuma, rootlesskit, azure-ipam, multus-cni, buildah, buildkitd, containerd...

GHSA-JV3W-X3R3-G6RM vulnerabilities

Vulnerabilities for packages: datadog-agent, docker, podman, calico, k3s, istio, flannel, nerdctl, kuma, rootlesskit, azure-ipam, multus-cni, buildah, buildkitd, containerd...

EUVD-2025-202256

Cross-site scripting XSS vulnerability in Request IP form in phpIPAM v1.7.3 allows remote attackers to inject arbitrary web script or HTML via the instructions parameter for the /app/admin/instructions/edit-result.php endpoint...

CVE-2025-13879

Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories other than those to which the have authorized access using the 'directory' parameter in '/mod/ajax.php?action=sections/list/list'.For...

CVE-2025-60912

phpIPAM v1.7.3 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability within its database export functionality. The generate-mysql.php function, located at the /app/admin/import-export/ endpoint, lacks sufficient CSRF protection. This allows a remote attacker to trigger large database...

CVE-2025-13879

Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories other than those to which the have authorized access using the 'directory' parameter in '/mod/ajax.php?action=sections/list/list'.For...