Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,800All CVEsplus 19,141 rejected
- 570Last 24 hours3,082 in the last 7 days
- 17,096Last 30 days1,603 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 2 | 6 | 0 | 0 | 9 | 40 |
| 2025 | 0 | 0 | 5 | 2 | 0 | 7 | 31 |
| 2024 | 0 | 3 | 9 | 0 | 0 | 12 | 24 |
| 2023 | 0 | 2 | 5 | 3 | 0 | 10 | 12 |
| 2022 | 0 | 2 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-65960 | Tetragon: Unauthenticated Tetragon gRPC admin API accessible from hostNetwork podscilium · tetragon | High8.8 |
| CVE-2026-56743 | Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock matchcilium · cilium | Medium5.4 |
| CVE-2026-56742 | Cilium: Namespaced HTTPRoutes can redirect traffic to other namespacescilium · cilium | Medium5.9 |
| CVE-2026-49445 | Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket accesscilium · cilium | Critical9.2 |
| CVE-2026-53935 | CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translationcilium · cilium | Medium6.9 |
| CVE-2026-10722 | cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflowcilium · ebpf | Medium4.8 |
| CVE-2026-41520 | Cillium exposes sensitive information included in the cilium-bugtool debug archivecilium · cilium | High7.9 |
| CVE-2026-33726 | Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node trafficcilium · cilium | Medium5.4 |
| CVE-2026-26963 | Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabledcilium · cilium | Medium6.1 |
| CVE-2025-64715 | Cilium with misconfigured toGroups in policies can lead to unrestricted egress trafficcilium · cilium | Medium4.0 |
| CVE-2025-48056 | Hubble CLI vulnerable to character injectioncilium · hubble | Medium5.3 |
| CVE-2025-32793 | Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusterscilium · cilium | Medium4.0 |
| CVE-2025-30163 | Node based network policies may incorrectly allow workload trafficcilium · cilium | Low3.4 |
| CVE-2025-30162 | East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancerscilium · cilium | Low3.2 |
| CVE-2025-23047 | Cilium vulnerable to information leakage via insecure default Hubble UI CORS headercilium · cilium | Medium6.5 |
| CVE-2025-23028 | DoS in Cilium agent DNS proxy from crafted DNS responsescilium · cilium | Medium5.3 |
| CVE-2024-52529 | Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in Ciliumcilium · cilium | Medium5.8 |
| CVE-2024-47825 | CIDR deny policies may not take effect when a more narrow CIDR allow is presentcilium · cilium | Medium4.0 |
| CVE-2024-42486 | Cilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway APIcilium · cilium | Medium5.4 |
| CVE-2024-42488 | Cilium agent's race condition may lead to policy bypass for Host Firewall policycilium · cilium | Medium6.8 |
| CVE-2024-42487 | Cilium's Gateway API route matching order contradicts specificationcilium · cilium | Medium4.0 |
| CVE-2024-37307 | Cilium leaks sensitive information in cilium-bugtoolcilium · cilium | High7.9 |
| CVE-2024-28860 | Insecure IPsec transport encryption in Ciliumcilium · cilium | High8.0 |
| CVE-2024-28250 | Cilium has possible unencrypted traffic between nodes when using WireGuard and L7 policiescilium · cilium | Medium6.1 |
| CVE-2024-28249 | Cilium has possible unencrypted traffic between nodes when using IPsec and L7 policiescilium · cilium | Medium6.1 |
| CVE-2024-28248 | Cilium intermittent HTTP policy bypasscilium · cilium | High7.2 |
| CVE-2024-25631 | Unencrypted traffic between pods when using Wireguard and an external kvstorecilium · cilium | Medium6.1 |
| CVE-2024-25630 | Cilium has unencrypted ingress/health traffic when using Wireguard transparent encryptioncilium · cilium | Medium6.1 |
| CVE-2023-41332 | Denial of service via Kubernetes annotations in specific Cilium configurationscilium · cilium | Low3.5 |
| CVE-2023-41333 | Bypass of namespace restrictions in CiliumNetworkPolicycilium · cilium | Medium6.9 |
| CVE-2023-39347 | Cilium NetworkPolicy bypass via pod labelscilium · cilium | High7.6 |
| CVE-2023-34242 | Cilium vulnerable to information leakage via incorrect ReferenceGrant handlingcilium · cilium | Low3.4 |
| CVE-2023-30851 | Potential HTTP policy bypass when using header rules in Ciliumcilium · cilium | Low2.6 |
| CVE-2023-29002 | Debug mode leaks confidential data in Ciliumcilium · cilium | High7.2 |
| CVE-2023-28114 | `cilium-cli` disables etcd authorization for clustermesh clusterscilium · cilium-cli | Medium4.8 |
| CVE-2023-27595 | Cilium eBPF filters may be temporarily removed during agent restartcilium · cilium | Medium6.5 |
| CVE-2023-27594 | Cilium vulnerable to potential network policy bypass when routing IPv6 trafficcilium · cilium | Medium4.2 |
| CVE-2023-27593 | cilium-agent container can access the host via `hostPath` mountcilium · cilium | Medium4.4 |
| CVE-2022-29179 | Improper Privilege Management in Ciliumcilium · cilium | High7.5 |
| CVE-2022-29178 | Incorrect Default Permissions in Ciliumcilium · cilium | High8.8 |