Tigera Calico Enterprise

• CVE-2026-41186 Medium 6.0 Unauthenticated Go pprof exposure in Calico debug server 0.7%
• CVE-2026-41187 Medium 6.2 Calico Tier Authorization Bypass via DeleteCollection 0.4%
• CVE-2026-6540 High 7.9 L7 policy bypass via unnormalized HTTP path matching 0.5%
• CVE-2026-41185 Medium 6.0 ServiceAccount token disclosure via Azure IPAM CNI plugin logs 0.3%
• CVE-2026-6720 High 7.2 Calicoctl leaks cluster credentials to stderr when verbose logging is enabled 0.2%
• CVE-2024-33522 Medium 6.7 Privilege escalation in Calico CNI install binary 0.2%
• CVE-2022-28224 Medium 5.5 Calico and Calico Enterprise may be vulnerable to route hijacking with the floating IP feature 0.6%