Envoy 1.36

Vulnerabilities in Envoy 1.36

37 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 03/11/2026.

• CVE-2026-111497, CVSS 4.0: 9.2, actively exploited: still open in 1.36.13
• CVE-2026-26308, CVSS 3.1: 8.2: fixed in 1.36.5
• CVE-2026-73553, CVSS 3.1: 7.5: fixed in 1.36.10
• CVE-2026-73552, CVSS 3.1: 7.5: fixed in 1.36.10
• CVE-2026-73550, CVSS 3.1: 7.5: fixed in 1.36.10
• CVE-2026-73548, CVSS 3.1: 7.5: fixed in 1.36.10
• CVE-2026-73547, CVSS 3.1: 7.5: fixed in 1.36.10
• CVE-2026-73513, CVSS 3.1: 7.5: fixed in 1.36.10
• CVE-2026-73512, CVSS 3.1: 7.5: fixed in 1.36.10
• CVE-2026-48743, CVSS 3.1: 7.5: fixed in 1.36.9
• CVE-2026-48706, CVSS 3.1: 7.5: fixed in 1.36.9
• CVE-2026-48497, CVSS 3.1: 7.5: fixed in 1.36.9
• CVE-2026-48044, CVSS 3.1: 7.5: fixed in 1.36.9
• CVE-2026-48042, CVSS 3.1: 7.5: fixed in 1.36.9
• CVE-2026-47774, CVSS 3.1: 7.5: fixed in 1.36.7
• CVE-2026-47221, CVSS 3.1: 7.5: fixed in 1.36.9
• CVE-2026-47204, CVSS 3.1: 7.5: fixed in 1.36.9
• CVE-2026-26330, CVSS 3.1: 7.5: fixed in 1.36.5
• CVE-2026-26310, CVSS 3.1: 7.5: fixed in 1.36.5
• CVE-2025-62504, CVSS 3.1: 7.5: fixed in 1.36.2
• CVE-2026-73546, CVSS 3.1: 7.4: fixed in 1.36.10
• CVE-2025-66220, CVSS 3.1: 7.1: fixed in 1.36.3
• CVE-2026-47775, CVSS 3.1: 6.8: fixed in 1.36.7
• CVE-2025-62409, CVSS 4.0: 6.6: not affected in 1.36.13
• CVE-2026-47207, CVSS 3.1: 6.5: fixed in 1.36.9
• CVE-2025-64527, CVSS 3.1: 6.5: fixed in 1.36.3
• CVE-2026-50572, CVSS 3.1: 5.9: fixed in 1.36.10
• CVE-2026-48521, CVSS 3.1: 5.9: fixed in 1.36.10
• CVE-2026-47205, CVSS 3.1: 5.9: fixed in 1.36.9
• CVE-2026-26311, CVSS 3.1: 5.9: fixed in 1.36.5
• CVE-2026-73551, CVSS 3.1: 5.3: fixed in 1.36.10
• CVE-2026-73549, CVSS 3.1: 5.3: fixed in 1.36.10
• CVE-2026-73511, CVSS 3.1: 5.3: fixed in 1.36.10
• CVE-2026-26309, CVSS 3.1: 5.3: fixed in 1.36.5
• CVE-2025-64763, CVSS 3.1: 5.3: fixed in 1.36.3
• CVE-2026-47778, CVSS 3.1: 4.4: fixed in 1.36.9
• CVE-2026-47692, CVSS 3.1: 4.3: fixed in 1.36.9