DeutschShown in its original language — a full translation is planned for a future version.
Google Cloud Platform Envoy Proxy, Istio und Service Mesh: Mehrere Schwachstellen
view advisory published 2026-03-11
Ein Angreifer kann mehrere Schwachstellen in Google Cloud Platform ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-31838US | medium5.3OT elevated | — | ||
Istio is an open platform to connect, manage, and secure microservices. Prior to 1.29.1, 1.28.5, and 1.27.8, a vulnerability in Envoy RBAC header matching could allow authorization… | ||||
| CVE-2026-31837US | high7.5OT elevated | — | ||
Istio is an open platform to connect, manage, and secure microservices. Prior to 1.29.1, 1.28.5, and 1.27.8, a user of Istio is impacted if the JWKS resolver becomes unavailable or… | ||||
| CVE-2026-26330US | high7.5 | — | ||
Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, At the rate limit filter, if the response phase limit with apply_on_stream_done… | ||||
| CVE-2026-26311US | — | — | ||
Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, a logic vulnerability in Envoy's HTTP connection manager (FilterManager) that a… | ||||
| CVE-2026-26310US | high7.5 | — | ||
Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, calling Utility::getAddressWithPort with a scoped IPv6 addresses causes a crash… | ||||
| CVE-2026-26309US | medium5.3 | — | ||
Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, an off-by-one write in Envoy::JsonEscaper::escapeString() can corrupt std::stri… | ||||
| CVE-2026-26308US | high8.2OT elevated | — | ||
Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, the Envoy RBAC (Role-Based Access Control) filter contains a logic vulnerabilit… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:5948 vom 2026-03-26external
- Red Hat Security Advisory RHSA-2026:5950 vom 2026-03-26external
- Red Hat Security Advisory RHSA-2026:5952 vom 2026-03-26external
- Amazon Linux Security Advisory ALAS2ECS-2026-100 vom 2026-04-01external
- Google Cloud Sicherheitsbulletin vom 2026-03-11external
- Google Cloud Sicherheitsbulletin vom 2026-03-11external
- WID-SEC-W-2026-0704 - CSAF Versionself
- WID-SEC-2026-0704 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan