Gateway

This hub aggregates every CVE we track for Gateway, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Gateway.

• CVE-2026-13474Denial of service via malformed HTTP/2 requests7.5Jun 30, 2026
• CVE-2026-10817Insufficient input validation leading to memory overread7.5Jun 30, 2026
• CVE-2026-10816Arbitrary File Read (Unauthenticated)7.5Jun 30, 2026
• CVE-2026-8655Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service9.8Jun 30, 2026
• CVE-2026-8452Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service9.8Jun 30, 2026
• CVE-2026-8451Insufficient input validation leading to memory overread7.5Jun 30, 2026
• CVE-2026-3055Insufficient input validation leading to memory overreadKEV9.8Mar 23, 2026
• CVE-2026-4368Race Condition leading to User Session Mixup8.8Mar 23, 2026
• CVE-2026-32621Apollo Federation has prototype pollution via incomplete key sanitization9.9Mar 13, 2026
• CVE-2026-22771Envoy Extension Policy lua scripts injection causes arbitrary command execution8.8Jan 12, 2026
• CVE-2025-66405Portkey.ai Gateway: Server-Side Request Forgery (SSRF) in Custom Host9.8Dec 1, 2025
• CVE-2025-12101Cross-Site Scripting (XSS)8.8Nov 11, 2025
• CVE-2025-8424Improper access control on the NetScaler Management Interface9.6Aug 26, 2025
• CVE-2025-7776Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service9.8Aug 26, 2025
• CVE-2025-7775Memory overflow vulnerability leading to Remote Code Execution and/or Denial of ServiceKEV9.8Aug 26, 2025