CVE-2026-49445
Cilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled,
CVSS
9.2
Crítico
EPSS
0.2%
p7
KEV
—
Exploit Today
2
0-100
Publicado: 15 jul 2026 · Última mod.: 16 jul 2026 · CWE-732
0.2%EPSS · 30 días0.2%
2026-07-162026-07-17
Cilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embedded or standalone Envoy instance creates a world-accessible admin.sock on cluster nodes, allowing a local attacker to access Envoy admin endpoints, expose TLS secrets, disrupt cluster traffic, or terminate Envoy. This issue is fixed in versions 1.17.14, 1.18.8, and 1.19.2.
- github.comhttps://github.com/cilium/cilium/commit/7bfbdd5c1be83d6c9ba3e089b4c804b6603505b6
- github.comhttps://github.com/cilium/cilium/pull/44512
- github.comhttps://github.com/cilium/cilium/releases/tag/v1.17.14
- github.comhttps://github.com/cilium/cilium/releases/tag/v1.18.8
- github.comhttps://github.com/cilium/cilium/releases/tag/v1.19.2
- github.comhttps://github.com/cilium/cilium/security/advisories/GHSA-3fcv-jvfp-m4q9
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2021-341107.8 ALT63.4%
——19WinWaste.NET version 1.0.6183.16475 has incorrect permissions, allowing a local unprivileged user to replace the executable with a malicious file that will be executed with "LocalSystem" privileges.9dCVE-2017-176778.8 ALT60.5%
——18BMC Remedy 9.1SP3 is affected by authenticated code execution. Authenticated users that have the right to create reports can use BIRT templates to run code.9dCVE-2022-262817.5 ALT56.5%
——17BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.9dCVE-2023-317487.8 ALT53.4%
——16Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the executable file.9dCVE-2023-390049.8 CRÍ52.0%
——16Insecure permissions in the configuration directory (/conf/) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allow attackers to access sensitive information (e.g., hashed root password) which could lead to privilege escalation.9dCVE-2021-406496.5 MED51.6%
——15In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set.9d