Log in Start free

istio

Products

ProductCVEsExploitedLatest
istio13–May 7, 2026

Exploited and recent CVEs

  • CVE-2026-41413 Medium 5.0 Istio Vulnerable to SSRF via RequestAuthentication jwksUri 0.3%
  • CVE-2026-39350 Medium 5.4 Istio AuthorizationPolicy Incorrect Regex Matching of Dots in serviceAccounts Fields Allows Policy Bypass 0.2%
  • CVE-2026-31838 Medium 6.9 Istio HTTP debug endpoints on port 15014 to enforce namespace-based authorization, preventing cross-namespace proxy data access. 0.3%
  • CVE-2026-31837 High 7.5 Istio JWKS resolver to prevent private key material from being exposed when JWKS fetch fails. 0.4%
  • CVE-2022-39388 High 7.6 Istio may allow identity impersonation if user has localhost access 0.5%
  • CVE-2022-39278 High 7.5 Istio vulnerable to denial of service attack due to Golang Regex Library 1.4%
  • CVE-2022-31045 High 7.0 Ill-formed headers may lead to unexpected behavior in Istio 1.2%
  • CVE-2022-24726 High 7.5 Unauthenticated control plane denial of service attack in Istio 1.6%
  • CVE-2022-23635 High 7.5 Unauthenticated control plane denial of service attack in Istio 1.7%
  • CVE-2022-21701 Medium 5.0 Privileged Escalation in Istio 0.8%
  • CVE-2022-21679 Medium 6.8 Authorization Policy bypass in Istio 1.1%
  • CVE-2021-39156 High 8.1 Fragments in Path May Lead to Authorization Policy Bypass 1.2%
  • CVE-2021-39155 High 8.3 Authorization Policy Bypass Due to Case Insensitive Host Comparison 1.2%