Veille CVE
CVE-2026-41520
4.4 MoyenneDescription
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.15, 1.18.9, and 1.19.3, the output of cilium-bugtool can contain sensitive data when the tool is run against Cilium deployments with WireGuard encryption enabled. This issue has been patched in versions 1.17.15, 1.18.9, and 1.19.3.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.9 Élevée | security-advisories@github.com | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N |
| 3.1 | 4.4 Moyenne | nvd@nist.gov (NVD) | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
Faiblesses (CWE)
Références
- https://github.com/cilium/cilium/releases/tag/v1.17.15 ProductRelease Notes
- https://github.com/cilium/cilium/releases/tag/v1.18.9 ProductRelease Notes
- https://github.com/cilium/cilium/releases/tag/v1.19.3 ProductRelease Notes
- https://github.com/cilium/cilium/security/advisories/GHSA-gj49-89wh-h4gj MitigationVendor Advisory