CVE-2026-26310
Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, calling Utility::getAddressWithPort with a scoped IPv6 addresses causes a crash. This utility is called in the data plane from the original_src filter and the dns filter. This vulnerability is fixed in 1.37.1, 1.36.5, 1.35.8, and 1.34.13.
Vendor
Product
CWE
Yayın Tarihi
2026-03-10 20:16:36
Güncelleme
2026-03-11 16:09:31
Source Identifier
security-advisories@github.com
KEV Date Added
-