Gateway
This hub aggregates every CVE we track for Gateway, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.
90
CVEs tracked
16
Critical
38
High
6
In CISA KEV
Severity distribution
HIGH38MEDIUM34CRITICAL16
Monthly trend
0
1
0
1
0
1
0
0
2
0
3
0
0
1
1
1
0
3
0
0
6
0
3
7
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Gateway.
- CVE-2026-53714Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode7.4
- CVE-2026-53716Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit6.5
- CVE-2026-53715Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock5.3
- CVE-2026-53719Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization6.5
- CVE-2026-53718Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass6.4
- CVE-2026-53713Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure9.1
- CVE-2026-53717Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header6.5
- CVE-2026-82270Portkey AI Gateway Server-Side Request Forgery via /v1/proxy/*7.5
- CVE-2026-19490NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490KEV9.8
- CVE-2026-19489Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.
- CVE-2026-13474Denial of service via malformed HTTP/2 requests7.5
- CVE-2026-10817Insufficient input validation leading to memory overread7.5
- CVE-2026-10816Arbitrary File Read (Unauthenticated)7.5
- CVE-2026-8655Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service9.8
- CVE-2026-8452Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of ServiceKEV9.8
Product normalization is registry-driven with AI assist and human review. How it works