tocsin

CVE-2026-53935

2 advisories.

Go/github.com/cilium/cilium CVE-2026-53935: medium 6.9, EPSS 0.34%

CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

Action: Upgrade github.com/cilium/cilium to 1.17.16 or later.

go get github.com/cilium/cilium@v1.19.4
go get github.com/cilium/cilium@v1.18.10
go get github.com/cilium/cilium@v1.17.16

Affected

introducedfixedlast affected
1.19.01.19.4-
1.18.21.18.10-
01.17.16-

Fixed versions

1.19.41.18.101.17.16

Sources

CVE-2026-53935 · published · modified · JSON

Go/github.com/cilium/cilium CVE-2026-53935: unknown, EPSS 0.34%

CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation in github.com/cilium/cilium

Action: Upgrade github.com/cilium/cilium to 1.17.16 or later.

go get github.com/cilium/cilium@v1.17.16
go get github.com/cilium/cilium@v1.18.10
go get github.com/cilium/cilium@v1.19.4

Affected

introducedfixedlast affected
01.17.16-
1.18.21.18.10-
1.19.01.19.4-

Fixed versions

1.17.161.18.101.19.4

Sources

CVE-2026-53935 · published · modified · JSON