Products: 7
Vulnerabilities: 14
Known Exploited: 0
1
Critical Level Threats
4
High Level Threats
0
Medium Level Threats
2
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-18674
Kong Mesh multi-zone: the global control plane attributes KDS-synced resources by an unvalidated in-band zone identifier
Last Modified: Aug 21, 2026
Published: Aug 17, 2026
CVE-2026-18679
Kong Mesh: kuma-dp connects to the control plane without verifying the TLS certificate when no CA is configured
Last Modified: Aug 13, 2026
Published: Aug 12, 2026
CVE-2026-18678
Kong Mesh: kumactl connects to the control plane without verifying the TLS certificate when no CA is configured
Last Modified: Aug 13, 2026
Published: Aug 12, 2026
CVE-2026-18677
Kong Mesh: a dataplane token without a workload binding can claim any workload's SPIFFE identity
Last Modified: Aug 13, 2026
Published: Aug 12, 2026
CVE-2026-18676
Kong Mesh: default control plane config leaks the admin token cross-origin via a CORS wildcard and localhost admin
Last Modified: Aug 13, 2026
Published: Aug 12, 2026
Items Per Page
