https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:18:30.836944+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-envoy-2026-48497 BIT-envoy-2026-48497 — Envoy: Abnormal process termination in DNS UDP filter 2026-10-03T23:18:30.874695+00:00

Affected: Bitnami: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, in cases where UDP DNS filter is configured with local resolution containing a name with the length of 255 octets or remote resolution for a name of 255 octets long can complete successfully, a query with such name will result in abnormal process termination. The abnormal process termination is triggered by an invalid runtime precondition that the query name is strictly less than 255 octets, contradicting DNS specification rfc1035#section-2.3.4 that the name can be 255 or less octets. This vulnerability is fixed in 1.35.11, 1.36.7, 1.37.3, and 1.38.1.

 https://cve.radiocsirt.org/vuln/euvd-2026-330729 EUVD-2026-330729 2026-10-03T23:18:30.874754+00:00 EUVD-2026-330729 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48497 fkie_cve-2026-48497 2026-10-03T23:18:30.874772+00:00

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, in cases where UDP DNS filter is configured with local resolution containing a name with the length of 255 octets or remote resolution for a name of 255 octets long can complete successfully, a query with such name will result in abnormal process termination. The abnormal process termination is triggered by an invalid runtime precondition that the query name is strictly less than 255 octets, contradicting DNS specification rfc1035#section-2.3.4 that the name can be 255 or less octets. This vulnerability is fixed in 1.35.11, 1.36.7, 1.37.3, and 1.38.1.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11141-1 openSUSE-SU-2026:11141-1 — istioctl-1.30.2-1.1 on GA media 2026-10-03T23:18:30.874800+00:00

istioctl-1.30.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2048 WID-SEC-W-2026-2048 — Google Cloud Service Mesh und Envoy Proxy: Mehrere Schwachstellen 2026-10-03T23:18:30.874824+00:00

Ein Angreifer kann mehrere Schwachstellen in Google Cloud Service Mesh und Envoy Proxy ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder andere, nicht näher bezeichnete Angriffe durchzuführen.