istio Schwachstellen (CVE)

Für istio veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

6 Ergebnisse

9.2Kritisch

CVE-2026-111497 KEV vor 14 Tagen

Out-of-Bounds Write in Google Brotli Decoder

Google Brotli; Siemens Desigo CC family V8; Siemens Desigo CC family V9; Siemens Heliox Dual Port 60kW

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

83%EPSS

5.0Mittel

CVE-2026-41413 vor 6 Monaten

Istio Vulnerable to SSRF via RequestAuthentication jwksUri

istio istio

Istio is an open platform to connect, manage, and secure microservices. Prior to versions 1.28.6 and 1.29.2, when a RequestAuthentication resource is created with a jwksUri pointing to an internal service, istiod makes an unauthenticated HTTP GET request to t…

5.4Mittel

CVE-2026-39350 vor 6 Monaten

Istio AuthorizationPolicy Incorrect Regex Matching of Dots in serviceAccounts Fields Allows Policy Bypass

istio istio

Istio is an open platform to connect, manage, and secure microservices. In versions 1.25.0 through 1.27.8, 1.28.0 through 1.28.5, 1.29.0, and 1.29.1, the serviceAccounts and notServiceAccounts fields in AuthorizationPolicy incorrectly interpret dots (.) as a …

6.9Mittel

CVE-2026-31838 vor 7 Monaten

Istio HTTP debug endpoints on port 15014 to enforce namespace-based authorization, preventing cross-namespace proxy data access.

istio istio

Istio is an open platform to connect, manage, and secure microservices. Prior to 1.29.1, 1.28.5, and 1.27.8, a vulnerability in Envoy RBAC header matching could allow authorization policy bypass when policies rely on HTTP headers that may contain multiple val…

8.7Hoch

CVE-2026-31837 vor 7 Monaten

Istio JWKS resolver to prevent private key material from being exposed when JWKS fetch fails.

istio istio; Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift Service Mesh 3.0; Red Hat Red Hat OpenShift Service Mesh 3.1

Istio is an open platform to connect, manage, and secure microservices. Prior to 1.29.1, 1.28.5, and 1.27.8, a user of Istio is impacted if the JWKS resolver becomes unavailable or the fetch fails, exposing hardcoded defaults regardless of use of the RequestA…

7.5Hoch

CVE-2023-44487 KEV vor 3 Jahren

HTTP/2 Rapid Reset Attack Vulnerability

ietf http; Siemens RUGGEDCOM APE1808; Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP; Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

100%EPSS