Sploitus

93 exploited vulnerabilities in Envoy

Showing 1–50 of 93, highest-scoring first

Vendors
Cloudflare, Lyft, Nginx, Ory, Astra Linux, Cilium
With known exploits
93
Affected Linux Linux Kernel versions
< 5.4.292, 5.10.236, 5.15.180, 6.1.133, 6.6.86, 6.12.22, 6.13.10, 6.14
Affected Envoyproxy Envoy versions
≤ 1.12.1, 1.26.7, 1.27.3, 1.28.1, 1.29.1, 1.29.0, 1.23.11, 1.24.9, 1.25.8, 1.26.3, 1.35.13, 1.36.9, 1.37.5, 1.38.3
Affected Cilium versions
< 1.17.14, 1.18.8, 1.19.2
Affected Apache Http Server versions
< 2.4.68
Affected Debian Debian Linux versions
= 11.0

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2026-33494
CVSS 10.0 CRITICAL 2026-03-20
CVE-2025-22021
CVSS 10.0 CRITICAL 2025-03-23
CVE-2022-29226
CVSS 10.0 CRITICAL 2022-06-09FIX AVAILABLE
CVE-2022-29225
CVSS 10.0 HIGH 2022-06-09FIX AVAILABLE
CVE-2019-9901
CVSS 10.0 CRITICAL 2019-04-05
CVE-2019-18802
CVSS 9.8 CRITICAL 2019-12-13FIX AVAILABLE
CVE-2019-18801
CVSS 9.8 CRITICAL 2019-12-13
CVE-2023-27493
CVSS 9.4 HIGH 2023-03-01FIX AVAILABLE
CVE-2026-49445
CVSS 9.2 CRITICAL 2026-07-06FIX AVAILABLE
CVE-2024-39305
CVSS 9.1 CRITICAL 2024-06-29FIX AVAILABLE
CVE-2023-35941
CVSS 9.0 HIGH 2023-07-25FIX AVAILABLE
CVE-2025-55162
CVSS 8.8 HIGH 2025-09-03FIX AVAILABLE
CVE-2026-26061
CVSS 8.7 HIGH 2026-03-27FIX AVAILABLE
CVE-2024-23324
CVSS 8.6 HIGH 2024-02-09FIX AVAILABLE
CVE-2024-53271
CVSS 8.5 HIGH 2024-11-19FIX AVAILABLE
CVE-2023-35944
CVSS 8.5 HIGH 2023-07-25FIX AVAILABLE
CVE-2023-27487
CVSS 8.5 HIGH 2023-03-01FIX AVAILABLE
CVE-2020-25017
CVSS 8.3 HIGH 2020-10-01FIX AVAILABLE
CVE-2019-9900
CVSS 8.3 HIGH 2019-04-14
CVE-2026-26308
CVSS 8.2 HIGH 2026-03-10FIX AVAILABLE
CVE-2026-41246
CVSS 8.1 HIGH 2026-04-23FIX AVAILABLE
CVE-2024-53270
CVSS 7.8 HIGH 2024-11-19FIX AVAILABLE
CVE-2024-32475
CVSS 7.8 HIGH 2024-04-18FIX AVAILABLE
CVE-2024-23323
CVSS 7.8 HIGH 2024-02-09FIX AVAILABLE
CVE-2024-23327
CVSS 7.8 HIGH 2024-02-09FIX AVAILABLE
CVE-2024-23325
CVSS 7.8 HIGH 2024-02-09FIX AVAILABLE
CVE-2024-23322
CVSS 7.8 HIGH 2024-02-09FIX AVAILABLE
CVE-2024-27919 1 exploit
CVSS 7.8 HIGH 2024-01-05FIX AVAILABLE
Exploit for Allocation of Resources Without Limits or Throttling in Apache Http_Server
CVE-2023-35945
CVSS 7.8 HIGH 2023-07-13FIX AVAILABLE
CVE-2019-18836
CVSS 7.8 HIGH 2019-10-23
CVE-2026-47220
CVSS 7.5 HIGH 2026-06-26FIX AVAILABLE
CVE-2026-48706
CVSS 7.5 HIGH 2026-06-26FIX AVAILABLE
CVE-2026-48497
CVSS 7.5 HIGH 2026-06-26FIX AVAILABLE
CVE-2026-48044
CVSS 7.5 HIGH 2026-06-26FIX AVAILABLE
CVE-2026-48042
CVSS 7.5 HIGH 2026-06-26FIX AVAILABLE
CVE-2026-47221
CVSS 7.5 HIGH 2026-06-26FIX AVAILABLE
CVE-2026-47204
CVSS 7.5 HIGH 2026-06-26FIX AVAILABLE
CVE-2026-48743
CVSS 7.5 HIGH 2026-06-24FIX AVAILABLE
CVE-2026-47774
CVSS 7.5 HIGH 2026-06-04FIX AVAILABLE
CVE-2026-49975 7 exploits
CVSS 7.5 HIGH 2026-05-27FIX AVAILABLE
Exploit for Memory Allocation with Excessive Size Value in Apache Http_ServerExploit for Memory Allocation with Excessive Size Value in Apache Http_Server
CVE-2026-26330
CVSS 7.5 HIGH 2026-03-10FIX AVAILABLE
CVE-2026-26310
CVSS 7.5 HIGH 2026-03-10FIX AVAILABLE
CVE-2025-62504
CVSS 7.5 HIGH 2025-10-16FIX AVAILABLE
CVE-2025-62409
CVSS 7.5 HIGH 2025-10-16FIX AVAILABLE
CVE-2025-54588
CVSS 7.5 HIGH 2025-09-02FIX AVAILABLE
CVE-2025-30157
CVSS 7.5 HIGH 2025-03-21FIX AVAILABLE
CVE-2024-45810
CVSS 7.5 HIGH 2024-09-19FIX AVAILABLE
CVE-2024-45809
CVSS 7.5 HIGH 2024-09-19FIX AVAILABLE
CVE-2024-45807
CVSS 7.5 HIGH 2024-09-19FIX AVAILABLE
CVE-2024-34363
CVSS 7.5 HIGH 2024-06-04