SEC.co
Emergency

By weakness (CWE)

CWE-158: related vulnerabilities

CVEs classified under CWE-158. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-47778MEDIUM 4.4

    Envoy proxy versions before 1.35.11, 1.36.7, 1.37.3, and 1.38.1 contain a certificate validation bypass vulnerability. An attacker can craft a certificate with a malicious DNS Subject Alternative Name (SAN) containing a hidden NUL byte character. Due to improper string handling in the validation logic, Envoy truncates the certificate's SAN at the NUL byte and compares only the truncated portion against expected values, allowing an invalid certificate to pass validation. This could enable a sophisticated attacker with certificate-issuance capability to impersonate legitimate upstream services in Envoy-routed environments.