https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-56743.htmlhttps://patchthecve.com/cve/CVE-2026-56743.htmlFri, 17 Jul 2026 17:29:02 +0000MEDIUM 5.4: Cilium is a networking, observability, and security solution. From 1.19.0 to 1.19.4, standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or namespace selectors erroneously generate a wildcard namespace allow rule when Cilium is configured with a custom clusterhttps://patchthecve.com/cve/CVE-2026-56742.htmlhttps://patchthecve.com/cve/CVE-2026-56742.htmlFri, 17 Jul 2026 17:48:48 +0000MEDIUM 5.9: Cilium is a networking, observability, and security solution. Prior to 1.17.17, 1.18.11, and 1.19.5, Cilium clusters using Gateway API allow users with permissions to create or update namespaced HTTPRoutes to mirror HTTP traffic to any Service in any namespace, bypassing the ReferenceGrant authorizahttps://patchthecve.com/cve/CVE-2026-49445.htmlhttps://patchthecve.com/cve/CVE-2026-49445.htmlFri, 17 Jul 2026 17:50:17 +0000CRITICAL 9.2: Cilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embedded or standalone Envoy instance creates a world-accessible admin.sock on cluster nodes, allowing a local attacker to access Envoy admin endpoints, ex