Cloudanix VulnDB

GO-2026-4522

None

CVSS

—

EPSS

—

Published

Feb 23, 2026

CISA due date

—

The record

Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled in github.com/cilium/cilium

Affected packages

Ecosystem	Package	Introduced	Fixed
Go	github.com/cilium/cilium	1.18.0	1.18.6

Related vulnerabilities

CVE-2026-26963 Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Same vulnerability
CVE-2025-64715 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic Also affects github.com/cilium/cilium