Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, Envoy can translate a downstream HTTP/3 request that is complete at the transport layer (HEADERS with FIN / headers-only close) but still carries a nonzero Content-Length into a complete upstream HTTP/1 request with unresolved body debt. In an HTTP/1 upstream deployment where the origin replies before reading the declared body and keeps the connection reusable, the beginning of the next Envoy-generated upstream request can be consumed as the first request's body. The remaining bytes are then parsed by the origin as a new HTTP/1 request. This was reproduced as a route-bypass/desync: direct /pwn was denied by Envoy, but the second downstream H3 stream received the response for backend-parsed GET /pwn HTTP/1.1. This vulnerability is fixed in 1.35.11, 1.36.7, 1.37.3, and 1.38.1.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-24 | 1 | Disclosure1 |
| 2026-06-26 | 2 | General1Patch1 |
Another small security research moment. CVE-2026-48743, a vulnerability I reported to Envoy Proxy, is now public. https://t.co/gdIlFicaKd
Post summary
The tweet announces that CVE-2026-48743, which the author reported to Envoy Proxy, has been publicly disclosed.
🚨*CVE* CVE-2026-48743 Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, Envoy can translate a downstream … https://www.cve.org/CVERecord?id=CVE-2026-48743 ----- Traducción: CVE-2026-48743 Env… http://infoflow.cloud`
Post summary
The text briefly mentions CVE‑2026‑48743 with a link to CVE details, but provides no deeper information on the vulnerability, exploit, or mitigation.
CVE-2026-48743 Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, Envoy can translate a downstream … https://www.cve.org/CVERecord?id=CVE-2026-48743
Post summary
The post highlights CVE‑2026-48743 affecting older Envoy releases and notes that newer versions (1.35.11, 1.36.7, 1.37.3, 1.38.1) contain a fix.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | envoyproxy | envoy | - | - | - |