CVE-2026-56743

Cilium is a networking, observability, and security solution. From 1.19.0 to 1.19.4, standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or namespace selectors erroneously generate a wildcard namespace allow rule when Cilium is configured with a custom clusterName rather than the default any value. The parser incorrectly instantiates a pod selector on selectorless peer definitions, allowing traffic from other workloads in the same namespace as the subject of the policy. This issue is fixed in version 1.19.5.

• CWE-863

• https://github.com/cilium/cilium/commit/1c84ae3b58a7cd54f7ee355e6c524c82f620eae8Patch
• https://github.com/cilium/cilium/commit/bacea640404c0805c23515353dc1681c5bf35171Patch
• https://github.com/cilium/cilium/pull/46305Patch
• https://github.com/cilium/cilium/pull/46456Patch
• https://github.com/cilium/cilium/releases/tag/v1.19.5Release Notes
• https://github.com/cilium/cilium/security/advisories/GHSA-fm8w-2m5w-9j7rVendor Advisory

Published

Jul 15, 2026

Last Modified

Jul 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-56722Dompdf is an HTML to PDF converter for PHP. In versions 3.15…5.3
• CVE-2026-5673A flaw was found in libtheora. This heap-based out-of-bounds…7.1
• CVE-2026-5674A flaw was found in PipeWire, a multimedia server. This vuln…8.8
• CVE-2026-56740JLine is a Java library for handling console input. Prior to…7.5
• CVE-2026-56741JLine is a Java library for handling console input. Prior to…7.5
• CVE-2026-56742Cilium is a networking, observability, and security solution…8.9
• CVE-2026-56745Netty is a network application framework for development of …7.5
• CVE-2026-56746Netty is a network application framework for development of …6.5
• CVE-2026-56747Improper control of generation of code in the JSON Pointer-t…8.8
• CVE-2026-56748Improper validation of symbolic links in the Pack Git import…8.8
• CVE-2026-5675A vulnerability was found in itsourcecode Construction Manag…6.3
• CVE-2026-56758The ACSE layer contains a flaw in the processing of AARQ PDU…6.9