Login Request a demo
IS
Product
istio
by istio · last CVE Oct 22, 2026
On CISA KEVExploited in the wild
28
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities28In the news7Timeline
Severity mix
Critical 4High 17Medium 5Low 2
Severity
All severities28Critical4High17Medium5Low2
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add istio to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-111497
In wildKEVNew
9.8
55%
Oct 22
Out-of-Bounds Write in Google Brotli Decoder
Affected: before 1.29.9; 1.30.0 before 1.30.6; 1.31.0 before 1.31.2
CVE-2022-31045
9.8
1%
Jun 9
Istio is an open platform to connect, manage, and secure microservices
Affected: before 1.12.8; 1.13.0 before 1.13.5; 1.14.0
CVE-2022-21679
9.8
1%
Jan 19
Istio is an open platform to connect, manage, and secure microservices
Affected: 1.12.0; 1.12.0; 1.12.0; 1.12.0; 1.12.0; 1.12.0; +3 more
CVE-2021-31921
9.8
1%
Jun 2
Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external client can access unexpected services in the cluster, bypassing…
Affected: before 1.8.6; 1.9.0 before 1.9.5
Showing 4