Known vulnerabilities in Istio 1.28.3
Vendor:
Istio
Software:
Istio
Version:
1.28.3
Software CPE:
cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*
Website:
https://istio.io/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Vulnerabilities by Severity
1.30.3
1.29.6
1.28.10
1.30.2
1.29.5
1.28.9
1.30.1
1.29.4
1.28.8
1.30.0
1.29.3
1.28.7
1.29.2
1.28.6
1.27.9
1.29.1
1.28.5
1.27.8
1.29.0
1.28.4
1.27.7
1.27.6
1.28.3
1.28.2
1.27.5
1.26.8
1.28.1
1.27.4
1.26.7
1.28.0
1.27.3
1.26.6
1.27.2
1.26.5
1.27.1
1.26.4
1.25.5
1.27.0
1.25.4
1.26.3
1.26.2
1.26.1
1.25.3
1.24.6
1.26.0
1.25.2
1.24.5
1.23.6
1.25.1
1.24.4
1.25.0
1.23.5
1.24.3
1.22.8
1.23.4
1.24.2
1.22.7
1.24.1
1.24.0
1.23.3
1.22.6
1.21.6
1.23.2
1.22.5
1.23.1
1.22.4
1.23.0
1.22.3
1.21.5
1.20.8
1.22.2
1.21.4
1.22.1
1.21.3
1.20.7
1.22.0
1.21.2
1.20.6
1.19.10
1.21.1
1.20.5
1.19.9
1.20.4
1.19.8
1.21.0
1.20.3
1.19.7
1.20.2
1.19.6
1.18.7
1.20.1
1.19.5
1.18.6
1.20.0
1.19.4
1.19.3
1.18.5
1.17.8
1.19.1
1.17.6
1.18.3
1.19.0
1.18.2
1.17.5
1.16.7
1.18.1
1.17.4
1.16.6
1.18.0
1.17.3
1.16.5
1.17.2
1.16.4
1.15.7
1.17.1
1.16.3
1.15.6
1.17.0
1.16.2
1.15.5
1.16.1
1.15.4
1.14.6
-
1.16.0
1.15.3
1.15.2
1.14.5
1.13.9
1.15.1
1.14.4
1.13.8
1.15.0
1.14.3
1.13.7
1.13.6
1.14.2
1.12.9
1.14.1
1.13.5
1.12.8
1.14.0
1.13.4
1.12.7
1.13.3
1.12.6
1.13.2
1.12.5
1.11.8
1.13.1
1.12.4
1.11.7
1.13.0
1.12.3
1.11.6
1.12.2
1.12.1
1.10.6
1.11.5
1.12.0
1.11.4
1.9.9
1.10.5
1.11.3
1.11.2
1.9.8
1.10.4
1.11.1
1.11.0
1.9.7
1.10.3
1.9.6
1.10.2
1.10.1
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.2.0
0.2.1
0.2.2
0.2.4
0.2.6
0.2.7
0.2.9
0.2.10
0.2.11
0.2.12
0.3.0
0.4.0
0.5.0
0.5.1
0.6.0
0.7.0
0.7.1
0.8.0
1.0.0
1.1.0
1.1.16
1.1.17
1.2.0
1.2.7
1.2.8
1.2.9
1.2.10
1.3.0
1.10.0
1.9.5
1.9.4
1.9.3
1.9.2
1.9.1
1.9.0
1.8.6
1.8.5
1.8.4
1.8.3
1.8.2
1.8.1
1.8.0
1.7.8
1.7.7
1.7.6
1.7.5
1.7.4
1.7.3
1.7.2
1.7.1
1.7.0
1.6.14
1.6.13
1.6.12
1.6.11
1.6.10
1.6.9
1.6.8
1.6.7
1.6.6
1.6.5
1.6.4
1.6.3
1.6.2
1.6.1
1.6.0
1.5.10
1.5.9
1.5.8
1.5.7
1.5.6
1.5.5
1.5.4
1.5.3
1.5.2
1.5.1
1.5.0
1.4.10
1.4.9
1.4.8
1.4.7
1.4.6
1.4.5
1.4.0
1.4.4
1.4.3
1.4.2
1.4.1
1.4
1.3.8
1.3.7
1.3.6
1.3.5
1.3.4
1.3.3
1.3.2
1.3.1
1.2.6
1.1.15
1.3
1.2.5
1.1.14
1.2.4
1.1.13
1.2.3
1.1.12
1.1.11
1.2.2
1.2.1
1.1.10
1.0.9
1.2
1.1.9
1.0.8
1.1.8
1.1.7
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0
0.8
0.7
0.6
0.5
0.4
0.3
0.2
0.1
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU126613 - Server-Side Request Forgery (SSRF) CVE-2026-41413 |
CWE-918 | Low | 1.28.6, 1.29.2 | 20.04.2026 |
SB20260420114 |
||
| #VU126609 - Improper Access Control CVE-2026-31838 |
CWE-284 | Medium | 1.27.8, 1.28.5, 1.29.1 | 20.04.2026 |
SB20260420115 |
||
| #VU126607 - Protection Mechanism Failure CVE-2026-31837 |
CWE-693 | Medium | 1.27.8, 1.28.5, 1.29.1 | 20.04.2026 |
SB20260420115 |
||
| #VU126603 - Permissive Regular Expression CVE-2026-39350 |
CWE-625 | Low | 1.27.9, 1.28.6, 1.29.2 | 20.04.2026 |
SB20260420114 |