Go/github.com/cilium/ciliumCilium CVE-2026-56742: medium 5.9, EPSS 0.17%

Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces

Action: Upgrade github.com/cilium/ciliumCilium to 1.18.11 or later.

go get github.com/cilium/ciliumCilium@v1.18.11

Affected

Fixed versions

Sources

• osv: GHSA-w7c2-w76w-5hmj#Go/github.com/cilium/ciliumCilium
• https://github.com/cilium/cilium/security/advisories/GHSA-w7c2-w76w-5hmj
• https://nvd.nist.gov/vuln/detail/CVE-2026-56742
• https://github.com/cilium/cilium/commit/7422068aff67ac77c7dcc57aa5b9240c91333deb
• https://github.com/cilium/cilium/commit/e0b1cef513ff910323f3743e9f3e3d86721e4857
• https://github.com/cilium/cilium/commit/f23929cff682d6ed0dc158070812cb302fc0032b
• https://github.com/cilium/cilium/commit/fd47963ea394d5e8fa4a88c40a79063430c512ca
• https://github.com/cilium/cilium
• https://github.com/cilium/cilium/releases/tag/v1.17.17
• https://github.com/cilium/cilium/releases/tag/v1.18.11
• https://github.com/cilium/cilium/releases/tag/v1.19.5

CVE-2026-56742 · published 2026-09-24T19:38:39Z · modified 2026-10-01T20:56:11.816067258Z · JSON