Cilium
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 40 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 20, 2022 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match
Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces
[CVE quest] Cilium ClusterNetworkPolicy matchExpssions Values silently dropped — 0-day in v1.20.0-pleases, no maintainer sponse in 9 days via GHSA Triage
[CVE quest] Cilium ClusterNetworkPolicy matchExpssions Values silently dropped — 0-day in v1.20.0-pleases, no maintainer sponse in 9 days via GHSA Triage
Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access
cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow
Cillium exposes sensitive information included in the cilium-bugtool debug archive
Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic
Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled
Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic
Monitor Cilium in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.