Beveiligingsadvies

CVE-2026-15738

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-14 20:19:23
Laatst bijgewerkt 2026-07-15 13:01:51
Toegewezen door AMZN
CVSS-score 8.5
Status PUBLISHED

Beschrijving

Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoof, or deny another namespace's gRPC traffic on a shared Gateway via a crafted HTTPRoute resource. To mitigate this issue, users should upgrade to version 3.4.2.