cilium records

37 published records for vendor cilium.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

37 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-27595No exploit	Cilium eBPF filters may be temporarily removed during agent restartcilium · cilium · CWE-755 Pre-auth	Critical9.8	—	0.7%	Mar 17, 2023
36Monitor	CVE-2023-39347No exploit	Cilium NetworkPolicy bypass via pod labelscilium · cilium · CWE-345	Critical9.0	—	0.6%	Sep 27, 2023
35Monitor	CVE-2026-56742No exploit	Cilium: Namespaced HTTPRoutes can redirect traffic to other namespacescilium · cilium · CWE-862 Broken access control (IDOR)	High8.9	—	0.2%	Jul 15, 2026
35Monitor	CVE-2026-49445No exploit	Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket accesscilium · cilium · CWE-732	High8.8	—	0.2%	Jul 15, 2026
34Monitor	CVE-2024-47825No exploit	CIDR deny policies may not take effect when a more narrow CIDR allow is presentcilium · cilium · CWE-276 Pre-auth	High8.7	—	0.4%	Oct 21, 2024
32Monitor	CVE-2023-41333No exploit	Bypass of namespace restrictions in CiliumNetworkPolicycilium · cilium · CWE-306 Auth bypass	High8.1	—	0.5%	Sep 27, 2023
32Monitor	CVE-2022-29179No exploit	Improper Privilege Management in Ciliumcilium · cilium · CWE-269 Local privilege escalation	High8.2	—	0.4%	May 20, 2022
32Monitor	CVE-2022-29178No exploit	Incorrect Default Permissions in Ciliumcilium · cilium · CWE-276	High8.2	—	0.3%	May 20, 2022
29Monitor	CVE-2023-27594No exploit	Cilium vulnerable to potential network policy bypass when routing IPv6 trafficcilium · cilium · CWE-285 Pre-auth Broken access control (IDOR)	High7.3	—	0.6%	Mar 17, 2023
28Monitor	CVE-2024-28248No exploit	Cilium intermittent HTTP policy bypasscilium · cilium · CWE-693 Pre-auth	High7.2	—	0.6%	Mar 18, 2024
28Monitor	CVE-2024-42486No exploit	Cilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway APIcilium · cilium · CWE-200 Pre-auth Info leak	High7.2	—	0.6%	Aug 16, 2024
27Monitor	CVE-2024-42488No exploit	Cilium agent's race condition may lead to policy bypass for Host Firewall policycilium · cilium · CWE-362 Pre-auth Race condition	Medium6.8	—	0.5%	Aug 15, 2024
27Monitor	CVE-2024-28860No exploit	Insecure IPsec transport encryption in Ciliumcilium · cilium · CWE-326 Pre-auth Weak crypto	Medium6.8	—	0.2%	Mar 27, 2024
26Monitor	CVE-2025-23047No exploit	Cilium vulnerable to information leakage via insecure default Hubble UI CORS headercilium · cilium · CWE-200 Pre-auth Info leak	Medium6.5	—	0.5%	Jan 22, 2025
26Monitor	CVE-2024-37307No exploit	Cilium leaks sensitive information in cilium-bugtoolcilium · cilium · CWE-200 Info leak	Medium6.5	—	0.2%	Jun 13, 2024
25Monitor	CVE-2023-29002No exploit	Debug mode leaks confidential data in Ciliumcilium · cilium · CWE-532 Info leak	Medium6.3	—	0.2%	Apr 18, 2023
24Monitor	CVE-2024-28249No exploit	Cilium has possible unencrypted traffic between nodes when using IPsec and L7 policiescilium · cilium · CWE-311 Pre-auth	Medium6.1	—	0.3%	Mar 18, 2024
24Monitor	CVE-2024-28250No exploit	Cilium has possible unencrypted traffic between nodes when using WireGuard and L7 policiescilium · cilium · CWE-311 Pre-auth	Medium6.1	—	0.2%	Mar 18, 2024
23Monitor	CVE-2024-52529No exploit	Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in Ciliumcilium · cilium · CWE-755 Pre-auth	Medium5.8	—	0.5%	Nov 25, 2024
22Monitor	CVE-2023-27593No exploit	cilium-agent container can access the host via `hostPath` mountcilium · cilium · CWE-276 Denial of service	Medium5.5	—	0.2%	Mar 17, 2023
22Monitor	CVE-2025-64715No exploit	Cilium with misconfigured toGroups in policies can lead to unrestricted egress trafficcilium · cilium · CWE-284 Broken access control (IDOR)	Medium5.5	—	0.2%	Nov 28, 2025
21Monitor	CVE-2023-30851No exploit	Potential HTTP policy bypass when using header rules in Ciliumcilium · cilium · CWE-693	Medium5.3	—	0.7%	May 25, 2023
21Monitor	CVE-2025-23028No exploit	DoS in Cilium agent DNS proxy from crafted DNS responsescilium · cilium · CWE-770 Pre-auth Denial of service	Medium5.3	—	0.4%	Jan 22, 2025
21Monitor	CVE-2023-34242No exploit	Cilium vulnerable to information leakage via incorrect ReferenceGrant handlingcilium · cilium · CWE-200 Pre-auth Info leak	Medium5.3	—	0.3%	Jun 15, 2023
21Monitor	CVE-2026-56743No exploit	Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock matchcilium · cilium · CWE-863 Broken access control (IDOR)	Medium5.4	—	0.2%	Jul 15, 2026

CVE-2023-27595
39Monitor
Cilium eBPF filters may be temporarily removed during agent restart
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
cilium · ciliumMar 17, 2023
CVE-2023-39347
36Monitor
Cilium NetworkPolicy bypass via pod labels
CriticalCVSS 9.0No exploitEPSS 1%
cilium · ciliumSep 27, 2023
CVE-2026-56742
35Monitor
Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces
HighCVSS 8.9No exploitEPSS 0%
- Broken access control (IDOR)
cilium · ciliumJul 15, 2026
CVE-2026-49445
35Monitor
Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access
HighCVSS 8.8No exploitEPSS 0%
cilium · ciliumJul 15, 2026
CVE-2024-47825
34Monitor
CIDR deny policies may not take effect when a more narrow CIDR allow is present
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
cilium · ciliumOct 21, 2024
CVE-2023-41333
32Monitor
Bypass of namespace restrictions in CiliumNetworkPolicy
HighCVSS 8.1No exploitEPSS 0%
- Auth bypass
cilium · ciliumSep 27, 2023
CVE-2022-29179
32Monitor
Improper Privilege Management in Cilium
HighCVSS 8.2No exploitEPSS 0%
- Local privilege escalation
cilium · ciliumMay 20, 2022
CVE-2022-29178
32Monitor
Incorrect Default Permissions in Cilium
HighCVSS 8.2No exploitEPSS 0%
cilium · ciliumMay 20, 2022
CVE-2023-27594
29Monitor
Cilium vulnerable to potential network policy bypass when routing IPv6 traffic
HighCVSS 7.3No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
cilium · ciliumMar 17, 2023
CVE-2024-28248
28Monitor
Cilium intermittent HTTP policy bypass
HighCVSS 7.2No exploitEPSS 1%
- Pre-auth
cilium · ciliumMar 18, 2024
CVE-2024-42486
28Monitor
Cilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway API
HighCVSS 7.2No exploitEPSS 1%
- Pre-auth
- Info leak
cilium · ciliumAug 16, 2024
CVE-2024-42488
27Monitor
Cilium agent's race condition may lead to policy bypass for Host Firewall policy
MediumCVSS 6.8No exploitEPSS 1%
- Pre-auth
- Race condition
cilium · ciliumAug 15, 2024
CVE-2024-28860
27Monitor
Insecure IPsec transport encryption in Cilium
MediumCVSS 6.8No exploitEPSS 0%
- Pre-auth
- Weak crypto
cilium · ciliumMar 27, 2024
CVE-2025-23047
26Monitor
Cilium vulnerable to information leakage via insecure default Hubble UI CORS header
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Info leak
cilium · ciliumJan 22, 2025
CVE-2024-37307
26Monitor
Cilium leaks sensitive information in cilium-bugtool
MediumCVSS 6.5No exploitEPSS 0%
- Info leak
cilium · ciliumJun 13, 2024
CVE-2023-29002
25Monitor
Debug mode leaks confidential data in Cilium
MediumCVSS 6.3No exploitEPSS 0%
- Info leak
cilium · ciliumApr 18, 2023
CVE-2024-28249
24Monitor
Cilium has possible unencrypted traffic between nodes when using IPsec and L7 policies
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
cilium · ciliumMar 18, 2024
CVE-2024-28250
24Monitor
Cilium has possible unencrypted traffic between nodes when using WireGuard and L7 policies
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
cilium · ciliumMar 18, 2024
CVE-2024-52529
23Monitor
Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in Cilium
MediumCVSS 5.8No exploitEPSS 1%
- Pre-auth
cilium · ciliumNov 25, 2024
CVE-2023-27593
22Monitor
cilium-agent container can access the host via `hostPath` mount
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
cilium · ciliumMar 17, 2023
CVE-2025-64715
22Monitor
Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic
MediumCVSS 5.5No exploitEPSS 0%
- Broken access control (IDOR)
cilium · ciliumNov 28, 2025
CVE-2023-30851
21Monitor
Potential HTTP policy bypass when using header rules in Cilium
MediumCVSS 5.3No exploitEPSS 1%
cilium · ciliumMay 25, 2023
CVE-2025-23028
21Monitor
DoS in Cilium agent DNS proxy from crafted DNS responses
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Denial of service
cilium · ciliumJan 22, 2025
CVE-2023-34242
21Monitor
Cilium vulnerable to information leakage via incorrect ReferenceGrant handling
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Info leak
cilium · ciliumJun 15, 2023
CVE-2026-56743
21Monitor
Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match
MediumCVSS 5.4No exploitEPSS 0%
- Broken access control (IDOR)
cilium · ciliumJul 15, 2026