https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 10:12:59 +0000 https://cve.radiocsirt.org/vuln/bit-cilium-2026-49445 <p><strong>Affected:</strong> Bitnami: cilium</p> <p>Cilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embedded or standalone Envoy instance creates a world-accessible admin.sock on cluster nodes, allowing a local attacker to access Envoy admin endpoints, expose TLS secrets, disrupt cluster traffic, or terminate Envoy. This issue is fixed in versions 1.17.14, 1.18.8, and 1.19.2.</p> <p><strong>Affected:</strong> Bitnami: cilium</p> <p>Cilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embedded or standalone Envoy instance creates a world-accessible admin.sock on cluster nodes, allowing a local attacker to access Envoy admin endpoints, expose TLS secrets, disrupt cluster traffic, or terminate Envoy. This issue is fixed in versions 1.17.14, 1.18.8, and 1.19.2.</p> https://cve.radiocsirt.org/vuln/bit-cilium-2026-49445 https://cve.radiocsirt.org/vuln/euvd-2026-338283 EUVD-2026-338283 https://cve.radiocsirt.org/vuln/euvd-2026-338283 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49445 <p>Cilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embedded or standalone Envoy instance creates a world-accessible admin.sock on cluster nodes, allowing a local attacker to access Envoy admin endpoints, expose TLS secrets, disrupt cluster traffic, or terminate Envoy. This issue is fixed in versions 1.17.14, 1.18.8, and 1.19.2.</p> <p>Cilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embedded or standalone Envoy instance creates a world-accessible admin.sock on cluster nodes, allowing a local attacker to access Envoy admin endpoints, expose TLS secrets, disrupt cluster traffic, or terminate Envoy. This issue is fixed in versions 1.17.14, 1.18.8, and 1.19.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-49445 https://cve.radiocsirt.org/vuln/ghsa-3fcv-jvfp-m4q9 <p><strong>Affected:</strong> Go: github.com/cilium/cilium</p> <p>### Impact</p> <p>When Cilium L7 functionality is enabled on a cluster, the Envoy instance supporting this functionality creates a world-accessible socket on cluster nodes. A local attacker would be able to access Envoy admin endpoints. Depending on deployment configuration, this can expose sensitive information or allow disruptive administrative operations, such as:</p> <p>- Exposing TLS secrets - Disrupting traffic in the cluster - Terminating the Envoy process</p> <p>This issue affects both the embedded and standalone Envoy deployment models.</p> <p>### Patches</p> <p>This issue affects:</p> <p>- Cilium v1.19 between v1.19.0 and v1.19.1 inclusive - Cilium v1.18 between v1.18.0 and v1.18.7 inclusive - All versions of Cilium prior to v1.17.14</p> <p>This issue has been patched in https://github.com/cilium/cilium/pull/44512, included in:</p> <p>- Cilium v1.19.2 - Cilium v1.18.8 - Cilium v1.17.14</p> <p>### Workarounds</p> <p>There is no known workaround to this issue.</p> <p>### Acknowledgements</p> <p>The Cilium community has worked together with members of Isovalent to prepare these mitigations. Special thanks to [moemen](https://github.com/moemen) for reporting the issue and [0xch4z](https://github.com/0xch4z) for their work on triaging and remediating this issue.</p> <p>### For more information</p> <p>If there are any questions or comments about this advisory, please reach out on [Slack (https://docs.cilium.io/en/latest/community/community/).</p> <p>If anyone thinks they have found a vulnerability affecting Cilium, it is strongly encouraged to report it to…</p> <p><strong>Affected:</strong> Go: github.com/cilium/cilium</p> <p>### Impact</p> <p>When Cilium L7 functionality is enabled on a cluster, the Envoy instance supporting this functionality creates a world-accessible socket on cluster nodes. A local attacker would be able to access Envoy admin endpoints. Depending on deployment configuration, this can expose sensitive information or allow disruptive administrative operations, such as:</p> <p>- Exposing TLS secrets - Disrupting traffic in the cluster - Terminating the Envoy process</p> <p>This issue affects both the embedded and standalone Envoy deployment models.</p> <p>### Patches</p> <p>This issue affects:</p> <p>- Cilium v1.19 between v1.19.0 and v1.19.1 inclusive - Cilium v1.18 between v1.18.0 and v1.18.7 inclusive - All versions of Cilium prior to v1.17.14</p> <p>This issue has been patched in https://github.com/cilium/cilium/pull/44512, included in:</p> <p>- Cilium v1.19.2 - Cilium v1.18.8 - Cilium v1.17.14</p> <p>### Workarounds</p> <p>There is no known workaround to this issue.</p> <p>### Acknowledgements</p> <p>The Cilium community has worked together with members of Isovalent to prepare these mitigations. Special thanks to [moemen](https://github.com/moemen) for reporting the issue and [0xch4z](https://github.com/0xch4z) for their work on triaging and remediating this issue.</p> <p>### For more information</p> <p>If there are any questions or comments about this advisory, please reach out on [Slack (https://docs.cilium.io/en/latest/community/community/).</p> <p>If anyone thinks they have found a vulnerability affecting Cilium, it is strongly encouraged to report it to…</p> https://cve.radiocsirt.org/vuln/ghsa-3fcv-jvfp-m4q9 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11519-1 <p>kubeshark-cli-53.4.0-1.1 on GA media</p> <p>kubeshark-cli-53.4.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11519-1