Database/Container, Kubernetes & orchestration
Cilium: Ingress NetworkPolicies not enforced for pod traffic to L7 services
CVSS 5.4CVE-2026-33726Container, Kubernetes & orchestrationcurated
Impact
Ingress NetworkPolicies not enforced for pod traffic to L7 services
Who can reach it
Any pod on the cluster network
What to do
Rolling Cilium upgrade
References
Related entries
- Cilium: CIDR ipBlock rules without selectors generate a wildcard, over-permitting trafficCVE-2026-56743 · CiliumMedium
- Cilium: Denial of service in the Cilium dataplaneCVE-2025-23028 · CiliumMedium
- Cilium: Agent pod hostPath allows writing to /opt/cni/bin, replacing the CNI binary on the hostCVE-2023-27593 · CiliumMedium
- Cilium: Deny rules for prefixes broader than /32 can be ignoredCVE-2024-47825 · CiliumMedium
- Cilium: WireGuard encryption gap in a specific Cilium configurationCVE-2025-32793 · CiliumMedium
- Cilium: Egress policies referencing AWS security group IDs are misappliedCVE-2025-64715 · CiliumMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.