CVE Tools
Track your stack

Gateway

102 CVEs tracked. 9 of them are in CISA KEV.

This hub aggregates every CVE we track for Gateway, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.

Gateway CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Gateway CVEs per month
MonthCVEs
2024-120
2025-011
2025-020
2025-031
2025-040
2025-050
2025-062
2025-070
2025-083
2025-090
2025-100
2025-111
2025-121
2026-011
2026-020
2026-033
2026-040
2026-050
2026-066
2026-070
2026-083
2026-0916
2026-103
2026-110

Severity

How the 102 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical2121%
  • High4444%
  • Medium3434%

Latest CVEs

The 15 most recently published vulnerabilities affecting Gateway.

  1. CVE-2026-110719Portkey AI Gateway 1.14.0 through 1.15.2 SSRF via x-portkey-custom-host Header7.2
  2. CVE-2026-107406Memory overflow vulnerability leading to Remote Code Execution or Denial of Service—
  3. CVE-2026-88779Memory overflow vulnerability leading to Denial of Service7.5
  4. CVE-2026-76992Uncontrolled Memory Allocation in CODESYS Gateway Client7.5
  5. CVE-2026-88778TCP Initial Sequence Number (ISN) prediction7.5
  6. CVE-2026-88777Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service9.8
  7. CVE-2026-88776Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service9.8
  8. CVE-2026-88775Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service9.8
  9. CVE-2026-88773HTTP Request Smuggling10.0
  10. CVE-2026-88774Feature policy bypass due to improper HTTP URL based expression usage7.2
  11. CVE-2026-88772Memory overflow vulnerability leading to Remote Code Execution or Denial of Service8.1
  12. CVE-2026-88771A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands9.8
  13. CVE-2026-53714Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode7.4
  14. CVE-2026-53716Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit6.5
  15. CVE-2026-53715Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock5.3

Product grouping is registry-driven, with AI assist and human review. How it works