Envoyproxy

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 127
    Known Exploited: 0
    3
    Critical Level Threats
    68
    High Level Threats
    54
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-73546

    envoy: envoy: stored XSS through dynamically generated stat names in admin interface

    Last Modified: Sep 02, 2026
    Published: Aug 26, 2026

    CVE-2026-73513

    envoy: envoy: HTTP/2 trailers without END_STREAM in oghttp2 cause heap use-after-free

    Last Modified: Sep 02, 2026
    Published: Aug 26, 2026

    CVE-2026-73511

    envoy: envoy: path matching bypass via per-segment parameters not stripped by router

    Last Modified: Sep 02, 2026
    Published: Aug 26, 2026

    CVE-2026-50572

    envoy: envoy: ext_authz use-after-free after rejecting an HTTP request

    Last Modified: Sep 02, 2026
    Published: Aug 26, 2026

    CVE-2026-73547

    envoy: envoy: ext_authz crash on CONNECT requests without :path pseudo-header

    Last Modified: Sep 02, 2026
    Published: Aug 26, 2026
    Items Per Page
    Envoyproxy Vulnerabilities & Security CVEs | CVE-DB