https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:16:25.207697+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-cilium-2025-32793 BIT-cilium-2025-32793 — Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters 2026-10-03T08:16:25.212921+00:00

Affected: Bitnami: cilium

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium. This issue has been patched in versions 1.15.16, 1.16.9, and 1.17.3. There are no workarounds available for this issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-232185 EUVD-2026-232185 2026-10-03T08:16:25.212971+00:00 EUVD-2026-232185 https://cve.radiocsirt.org/vuln/fkie_cve-2025-32793 fkie_cve-2025-32793 2026-10-03T08:16:25.212986+00:00

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium. This issue has been patched in versions 1.15.16, 1.16.9, and 1.17.3. There are no workarounds available for this issue.

 https://cve.radiocsirt.org/vuln/ghsa-5vxx-c285-pcq4 GHSA-5vxx-c285-pcq4 — In Cilium, packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters 2026-10-03T08:16:25.213009+00:00

Affected: Go: github.com/cilium/cilium

### Impact

When using [Wireguard transparent encryption](https://docs.cilium.io/en/stable/security/network/encryption-wireguard/#encryption-wg) in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium.

### Patches

This issue has been patched in https://github.com/cilium/cilium/pull/38592.

This issue affects:

- Cilium v1.15 between v1.15.0 and v1.15.15 inclusive - Cilium v1.16 between v1.16.0 and v1.16.8 inclusive - Cilium v1.17 between v1.17.0 and v1.17.2 inclusive

This issue is fixed in:

- Cilium v1.15.16 - Cilium v1.16.9 - Cilium v1.17.3

### Workarounds

There is no workaround to this issue.

### Acknowledgements

The Cilium community has worked together with members of Isovalent to prepare these mitigations. Special thanks to @gandro and @pippolo84 for reporting this issue and to @julianwiedmann for the patch.

### For more information

If you think you have found a vulnerability affecting Cilium, we strongly encourage you to report it to our security mailing list at [security@cilium.io](mailto:security@cilium.io). This is a private mailing list for the Cilium security team, and your report will be treated as top priority.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15017-1 openSUSE-SU-2025:15017-1 — govulncheck-vulndb-0.0.20250422T181640-1.1 on GA media 2026-10-03T08:16:25.213046+00:00

govulncheck-vulndb-0.0.20250422T181640-1.1 on GA media