https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:18:12.147056+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-234417 EUVD-2026-234417 2026-10-06T16:18:12.153555+00:00 EUVD-2026-234417 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23635 fkie_cve-2022-23635 2026-10-06T16:18:12.153595+00:00

Istio is an open platform to connect, manage, and secure microservices. In affected versions the Istio control plane, `istiod`, is vulnerable to a request processing error, allowing a malicious attacker that sends a specially crafted message which results in the control plane crashing. This endpoint is served over TLS port 15012, but does not require any authentication from the attacker. For simple installations, Istiod is typically only reachable from within the cluster, limiting the blast radius. However, for some deployments, especially [multicluster](https://istio.io/latest/docs/setup/install/multicluster/primary-remote/) topologies, this port is exposed over the public internet. There are no effective workarounds, beyond upgrading. Limiting network access to Istiod to the minimal set of clients can help lessen the scope of the vulnerability to some extent.

 https://cve.radiocsirt.org/vuln/ghsa-856q-xv3c-7f2f GHSA-856q-xv3c-7f2f — Unauthenticated control plane denial of service attack in Istio 2026-10-06T16:18:12.153630+00:00

Affected: Go: istio.io/istio

### Impact The Istio control plane, `istiod`, is vulnerable to a request processing error, allowing a malicious attacker that sends a specially crafted message which results in the control plane crashing. This endpoint is served over TLS port 15012, but does not require any authentication from the attacker.

For simple installations, Istiod is typically only reachable from within the cluster, limiting the blast radius. However, for some deployments, especially [multicluster](https://istio.io/latest/docs/setup/install/multicluster/primary-remote/) topologies, this port is exposed over the public internet.

### Patches

- Istio 1.13.1 and above - Istio 1.12.4 and above - Istio 1.11.7 and above

### Workarounds There are no effective workarounds, beyond upgrading. Limiting network access to Istiod to the minimal set of clients can help lessen the scope of the vulnerability to some extent.

### References More details can be found in the [Istio Security Bulletin](https://istio.io/latest/news/security/istio-security-2022-003)

### For more information If you have any questions or comments about this advisory, please email us at [istio-security-vulnerability-reports@googlegroups.com](mailto:istio-security-vulnerability-reports@googlegroups.com)

 https://cve.radiocsirt.org/vuln/gsd-2022-23635 gsd-2022-23635 2026-10-06T16:18:12.153666+00:00 gsd-2022-23635 https://cve.radiocsirt.org/vuln/rhsa-2022:1275 RHSA-2022:1275 — Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.1.2 security update 2026-10-06T16:18:12.153679+00:00

envoy: Null pointer dereference when using JWT filter safe_regex match envoy: Use-after-free when response filters increase response data envoy: Use-after-free when tunneling TCP over HTTP envoy: Incorrect configuration handling allows mTLS session re-use without re-validation envoy: Incorrect handling of internal redirects to routes with a direct response entry envoy: Stack exhaustion when a cluster is deleted via Cluster Discovery Service istio: unauthenticated control plane denial of service attack istio: Unauthenticated control plane denial of service attack due to stack exhaustion

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0970 WID-SEC-W-2022-0970 — Red Hat OpenShift: Mehrere Schwachstellen 2026-10-06T16:18:12.153710+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen.