CVE-2026-26963

—

CVSS 3.1

5.4 medium

EPSS

<1%p3

Published

Feb 20, 2026 (Feb 20, 2026)

Modified

Jun 17, 2026

Description

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.18.0 through 1.18.5 will incorrectly permit traffic from Pods on other nodes when Native Routing, WireGuard and Node Encryption are enabled. This issue has been fixed in version 1.18.6.

Vendors: cilium
Products: cilium
Weakness: CWE-863
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.