SEC.co
Emergency

By weakness (CWE)

CWE-480: related vulnerabilities

CVEs classified under CWE-480. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-48497MEDIUM 5.9

    Envoy, a widely-used proxy for cloud-native applications, has a flaw in its DNS filtering that crashes the process when handling domain names of exactly 255 characters. While DNS standards allow names up to 255 octets, Envoy incorrectly requires them to be strictly shorter, causing abnormal termination when this limit is met. This affects both local and remote DNS resolution configurations. The issue is resolved in patched versions across all affected release branches.