CVE-2026-15738
High · 8.5CVSS
8.5
EPSS
0.6%
Published
Jul 14, 2026
CISA due date
—
The record
Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoof, or deny another namespace's gRPC traffic on a shared Gateway via a crafted HTTPRoute resource. To mitigate this issue, users should upgrade to version 3.4.2.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119408 n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code… CWE-653
- CVE-2026-115517 Unrestricted network access between execution contexts in KNIME Business Hub before… CWE-653
- CVE-2026-15366 A control logic defect in a specific built-in webpage of Kids Mode allows users to view… CWE-653
- CVE-2026-62246 Kamaji is the Hosted Control Plane Manager for Kubernetes. CWE-653
- CVE-2026-65635 Improper Isolation or Compartmentalization vulnerability in malach-it boruta… CWE-653
- CVE-2026-63071 Improper Isolation or Compartmentalization vulnerability in Apache Syncope. CWE-653
- CVE-2026-53421 Improper Isolation or Compartmentalization vulnerability in Apache Syncope. CWE-653
- CVE-2026-53405 Improper Isolation or Compartmentalization vulnerability in Apache Syncope. CWE-653