420 matches found
netfence
Netfence Like Envoy xDS, but for eBPF filters. Netfence runs as a daemon on your VM/container hosts and automatically injects eBPF filter programs into cgroups and network interfaces, with a built-in DNS server that resolves allowed domains and populates the IP allowlist. Netfence daemons can be...
CVE-2026-62201-OpenClaw-SSRF
CVE-2026-62201 — OpenClaw Sandbox Exec-Server Network Policy Bypass SSRF Severity: High · CVSS: 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N · CWE-918 Server-Side Request Forgery Vulnerability at a Glance Field| Value ---|--- Advisory| GHSA-mgvr-6gvw-3rgr NVD| CVE-2026-62201 Product| OpenClaw...
CVE-2026-122266
A flaw was found in aws-network-policy-agent. Due to improper isolation of shared connection tracking data, an authenticated attacker operating on the same host node can poison shared network tracking state using crafted raw network frames. An attacker can exploit this vulnerability to bypass...
CVE-2026-86831
A flaw was found in the aws-network-policy-agent. An authenticated remote user could exploit improper validation of pod identifier uniqueness by crafting specific pod and namespace names. This allows them to bypass NetworkPolicy enforcement on co-located pods in other namespaces, potentially...
CVE-2026-122266
Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 VPC CNI before 1.22.3 might allow an authenticated adjacent user to bypass NetworkPolicy ingress enforcement on co-located pods via eBPF conntrack map poisoning using crafted AFPACKE...
CVE-2026-122266 Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS
Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 VPC CNI before 1.22.3 might allow an authenticated adjacent user to bypass NetworkPolicy ingress enforcement on co-located pods via eBPF conntrack map poisoning using crafted AFPACKE...
CVE-2026-122266
The Amazon EKS Network Policy Agent (versions before 1.3.7) and VPC CNI (versions before 1.22.3) are vulnerable to improper isolation of shared resources . An authenticated adjacent user can bypass NetworkPolicy ingress enforcement on co-located pods by using crafted AF_PACKET frames to perform e...
CVE-2026-122266 Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS
Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 VPC CNI before 1.22.3 might allow an authenticated adjacent user to bypass NetworkPolicy ingress enforcement on co-located pods via eBPF conntrack map poisoning using crafted AFPACKE...
PT-2026-137196
Name of the Vulnerable Software and Affected Versions Amazon EKS Network Policy Agent versions prior to 1.3.7 Amazon VPC CNI versions prior to 1.22.3 Description Improper isolation of shared resources allows an authenticated adjacent user to bypass NetworkPolicy ingress enforcement on co-located...
CLEANSTART-2026-BE41741 security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion
Security vulnerability affects the kubernetes-dns-node-cache package. A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion...
ROS-20261022-73-0044
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the use of an untrusted network policy file. Exploiting these vulnerabilities allows a malicious actor to compromise the integrity of protected information...
CVE-2026-96246
Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to disclose information over a network...
CVE-2026-85811
Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-85806
Integer underflow wrap or wraparound in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...
CVE-2026-85799
Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...
CVE-2026-85371
Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...
CVE-2026-83655
Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to deny service over a network...
CVE-2026-70207
Heap-based buffer overflow in Network Policy Server NPS allows an authorized attacker to execute code over a network...
