Vulnerabilidades do Amazon Aws-load-balancer-controller
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Amazon Aws-load-balancer-controller: 1 registro(s), com versões afetadas e correções.
CVE-2026-15738
Alta · 8.5
CWE-653 14/07/2026
Cross-namespace traffic interception via incorrect route precedence ordering in AWS Load Balancer Controller
Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoof, or deny another namespace's gRPC traffic on a shared Gateway via a crafted HTTPRoute resource.
To mitigate this issue, users should upgrade to version 3.4.2.