https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T11:02:37.245911+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-59140 cnvd-2021-59140 2026-10-15T11:02:37.248997+00:00 cnvd-2021-59140 https://cve.radiocsirt.org/vuln/euvd-2026-29348 EUVD-2026-29348 2026-10-15T11:02:37.249027+00:00 EUVD-2026-29348 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36371 fkie_cve-2021-36371 2026-10-15T11:02:37.249042+00:00

Emissary-Ingress (formerly Ambassador API Gateway) through 1.13.9 allows attackers to bypass client certificate requirements (i.e., mTLS cert_required) on backend upstreams when more than one TLSContext is defined and at least one configuration exists that does not require client certificate authentication. The attacker must send an SNI specifying an unprotected backend and an HTTP Host header specifying a protected backend. (2.x versions are unaffected. 1.x versions are unaffected with certain configuration settings involving prune_unreachable_routes and a wildcard Host resource.)

 https://cve.radiocsirt.org/vuln/ghsa-hc2q-w3c3-348m GHSA-hc2q-w3c3-348m 2026-10-15T11:02:37.249071+00:00

Emissary-Ingress (formerly Ambassador API Gateway) through 1.13.9 allows attackers to bypass client certificate requirements (i.e., mTLS cert_required) on backend upstreams when more than one TLSContext is defined and at least one configuration exists that does not require client certificate authentication. The attacker must send an SNI specifying an unprotected backend and an HTTP Host header specifying a protected backend.

 https://cve.radiocsirt.org/vuln/gsd-2021-36371 gsd-2021-36371 2026-10-15T11:02:37.249088+00:00 gsd-2021-36371