284 matches found
netfence
Netfence Come Envoy xDS, ma per filtri eBPF. Netfence funge da demone sui tuoi host VM/container e inietta automaticamente programmi di filtro eBPF nei cgroups e nelle interfacce di rete, con un server DNS integrato che risolve i domini consentiti e popola la lista di IP consentiti. I demoni di...
CVE-2026-65092
NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering...
CVE-2026-65092
NVIDIA OpenShell Sandbox for Linux is affected by a path traversal vulnerability that allows bypassing its L7 REST network policy . An attacker with network access and low privileges can exploit this to achieve information disclosure and data tampering . The CVSS v3.1 base score is 8.5 (HIGH) , w...
EUVD-2026-66091
NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering...
GHSA-6VCH-Q96H-7GC3 vulnerabilities
Vulnerabilities for packages: loki, cilium-cli, cilium, kots, external-dns, kubernetes, rancher-support-bundle-kit, reports-server, kube-conformance, multicluster-controlplane, dapr, kine, kyverno, milvus, multicluster-controlplane-fips, minio, hubble, cert-manager...
GO-2024-3074 vulnerabilities
Vulnerabilities for packages: cilium-cli, cilium, hubble-ui, hubble-fips, hubble-ui-backend-fips, hubble, cilium-fips...
GO-2023-1785 vulnerabilities
Vulnerabilities for packages: hubble-ui...
GO-2025-3566 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GO-2024-3074 vulnerabilities
Vulnerabilities for packages: cilium-cli, hubble-ui, hubble...
CLEANSTART-2026-OD94045 Security fixes in aws-network-policy-agent-fips 1.3.7-r1
Package aws-network-policy-agent-fips version 1.3.7-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...
CLEANSTART-2026-OB14501 Security fixes in aws-network-policy-agent 1.3.5-r2
Package aws-network-policy-agent version 1.3.5-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...
CVE-2026-18618
A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to known HTTP/2 denial of service DoS issues. An in-cluster attacker, with network access to the MLMD pod, could exploit these vulnerabilities by sending specially crafted HTTP/2...
CLEANSTART-2026-TH50881 Security fixes in aws-network-policy-agent-fips 1.3.2-r0
Package aws-network-policy-agent-fips version 1.3.2-r0 fixes 21 vulnerabilities: ghsa-xmrv-pmrh-hhx2, CVE-2026-25681, CVE-2026-42502, CVE-2026-42504, CVE-2026-42505...
CVE-2026-62201
OpenClaw prior to version 2026.6.6 contains a network policy bypass in the sandbox exec-server that lets lower-trust callers reach internal network destinations blocked by policy. Attackers can send HTTP requests through the exec-server to access restricted network resources. The CVE description ...
CVE-2026-62201 OpenClaw < 2026.6.6 Network Policy Bypass via exec-server
OpenClaw versions before 2026.6.6 contain a network policy bypass vulnerability in the sandbox exec-server that allows lower-trust callers to reach internal network destinations blocked by OpenClaw policy. Attackers can send HTTP requests through the exec-server to access network resources that...
CVE-2026-62201 OpenClaw < 2026.6.6 Network Policy Bypass via exec-server
OpenClaw versions before 2026.6.6 contain a network policy bypass vulnerability in the sandbox exec-server that allows lower-trust callers to reach internal network destinations blocked by OpenClaw policy. Attackers can send HTTP requests through the exec-server to access network resources that...
PT-2026-60612
OpenClaw versions before 2026.6.6 contain a network policy bypass vulnerability in the sandbox exec-server that allows lower-trust callers to reach internal network destinations blocked by OpenClaw policy. Attackers can send HTTP requests through the exec-server to access network resources that...
CVE-2026-56743
Cilium (versions 1.19.0–1.19.4) is affected where standard Kubernetes NetworkPolicy ipBlock rules without pod/namespace selectors, when configured with a non-default clusterName, can generate a wildcard namespace allow rule. The parser incorrectly creates a pod selector for selectorless peers, en...
CVE-2026-56743 Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match
Cilium is a networking, observability, and security solution. From 1.19.0 to 1.19.4, standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or namespace selectors erroneously generate a wildcard namespace allow rule when Cilium is configured with a custom...