CVE Tools
Track your stack

Gateway

101 CVEs tracked. 9 of them are in CISA KEV.

This hub aggregates every CVE we track for Gateway, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

Gateway CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Gateway CVEs per month
MonthCVEs
2024-111
2024-120
2025-011
2025-020
2025-031
2025-040
2025-050
2025-062
2025-070
2025-083
2025-090
2025-100
2025-111
2025-121
2026-011
2026-020
2026-033
2026-040
2026-050
2026-066
2026-070
2026-083
2026-0916
2026-102

Severity

How the 101 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical2121%
  • High4344%
  • Medium3435%

Latest CVEs

The 15 most recently published vulnerabilities affecting Gateway.

  1. CVE-2026-107406Memory overflow vulnerability leading to Remote Code Execution or Denial of Service—
  2. CVE-2026-88779Memory overflow vulnerability leading to Denial of Service7.5
  3. CVE-2026-76992Uncontrolled Memory Allocation in CODESYS Gateway Client7.5
  4. CVE-2026-88778TCP Initial Sequence Number (ISN) prediction7.5
  5. CVE-2026-88777Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service9.8
  6. CVE-2026-88776Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service9.8
  7. CVE-2026-88775Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service9.8
  8. CVE-2026-88773HTTP Request Smuggling10.0
  9. CVE-2026-88774Feature policy bypass due to improper HTTP URL based expression usage7.2
  10. CVE-2026-88772Memory overflow vulnerability leading to Remote Code Execution or Denial of Service8.1
  11. CVE-2026-88771A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands9.8
  12. CVE-2026-53714Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode7.4
  13. CVE-2026-53716Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit6.5
  14. CVE-2026-53715Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock5.3
  15. CVE-2026-53719Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization6.5

Product grouping is registry-driven, with AI assist and human review. How it works