Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Proxy Server

Envoy Proxy

Envoy is an open source edge and service proxy designed for cloud-native applications

Official Site:

https://www.envoyproxy.io/

Severity Summary:

Critical: 14 High: 63 Medium: 18 Low: 1
Reference
Title
Severity
CVE-2026-26330
Envoy Proxy Use After Free Vulnerability
High
CVE-2025-66220
Envoy Proxy Improper Null Termination Vulnerability
High
CVE-2025-62409
Envoy Proxy NULL Pointer Dereference Vulnerability
High
CVE-2025-62504
Envoy Proxy Use After Free Vulnerability
High
CVE-2025-55162
Envoy Proxy Insufficient Session Expiration Vulnerability
High
CVE-2024-27919
Envoy Proxy Detection of Error Condition Without Action Vulnerability
High
CVE-2024-45809
Envoy Proxy NULL Pointer Dereference Vulnerability
High
CVE-2024-30255
Envoy Proxy Detection of Error Condition Without Action Vulnerability
High
CVE-2024-32475
Envoy Proxy Reachable Assertion Vulnerability
High
CVE-2024-53270
Envoy Proxy NULL Pointer Dereference Vulnerability
High
CVE-2024-53271
Envoy Proxy Always-Incorrect Control Flow Implementation Vulnerability
High
CVE-2024-53269
Envoy Proxy Always-Incorrect Control Flow Implementation Vulnerability
High
CVE-2025-30157
Envoy Proxy Vulnerability
High
CVE-2024-45807
Envoy Proxy Vulnerability
High
CVE-2024-45810
Envoy Proxy Vulnerability
High
CVE-2026-26308
Envoy Proxy Incorrect Authorization Vulnerability
High
CVE-2023-27496
Envoy Proxy Vulnerability
High
CVE-2021-28683
Envoy Proxy NULL Pointer Dereference Vulnerability
High
CVE-2020-12604
Envoy Proxy Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
High
CVE-2021-32779
Envoy Proxy Incorrect Authorization Vulnerability
High
CVE-2021-32780
Envoy Proxy Improper Check for Unusual or Exceptional Conditions Vulnerability
High
CVE-2021-32781
Envoy Proxy Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
High
CVE-2020-12603
Envoy Proxy Uncontrolled Resource Consumption Vulnerability
High
CVE-2021-28682
Envoy Proxy Integer Overflow or Wraparound Vulnerability
High
CVE-2021-29258
Envoy Proxy Reachable Assertion Vulnerability
High
CVE-2020-12605
Envoy Proxy Uncontrolled Resource Consumption Vulnerability
High
CVE-2021-21378
Envoy Proxy Improper Authentication Vulnerability
High
CVE-2020-35471
Envoy mishandles dropped and truncated datagrams Issue
High
CVE-2020-35470
Envoy Wrong DOWNSTREAM_REMOTE_ADDRESS logged Issue
High
CVE-2019-9900
Envoy Proxy Improper Input Validation Vulnerability
High