Tigera vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20231
3. 20241
4. 20266

Newest CVEs

• CVE-2026-41186

  Unauthenticated Go pprof exposure in Calico debug server

  Tigera · Calico

  Medium6.0
• CVE-2026-41187

  Calico Tier Authorization Bypass via DeleteCollection

  Tigera · Calico

  Medium6.2
• CVE-2026-6540

  L7 policy bypass via unnormalized HTTP path matching

  Tigera · Calico

  High7.9
• CVE-2026-41185

  ServiceAccount token disclosure via Azure IPAM CNI plugin logs

  Tigera · Calico

  Medium6.0
• CVE-2026-6720

  Calicoctl leaks cluster credentials to stderr when verbose logging is enabled

  Tigera · Calico

  High7.2
• CVE-2026-41184

  ServiceAccount token disclosure via install-cni container logs

  Tigera · Calico

  Medium6.0
• CVE-2024-33522

  Privilege escalation in Calico CNI install binary

  Tigera · Calico

  Medium6.7
• CVE-2023-41378

  Calico Typha hangs during unclean TLS handshake

  Calico · Typha

  High7.5
• CVE-2022-28224

  Calico and Calico Enterprise may be vulnerable to route hijacking with the floating IP feature

  Tigera · Calico Enterprise

  Medium5.5