What’s Vulnerable › Products

Envoy vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Envoy version is affected

Latest Envoy vulnerabilities

• CVE-2026-6994 — Envoy Query Parameter header_mutation.cc params.add injection (CVSS 6.3)