01 Record

CVE-2026-66785

Submariner: submariner: unvalidated endpoint.spec.subnets propagated into wireguard allowedips / ipsec enables traffic hijack

CriticalPUBLISHEDCNA: redhat

Base score9.9 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

02 Description

Submariner: submariner: unvalidated endpoint.spec.subnets propagated into wireguard allowedips / ipsec enables traffic hijack

Published

2026-08-20 18:15Z1 DAY AGO

Last updated

2026-08-20 18:15Z1 DAY AGO

Reserved

2026-07-27

Assigning CNA

redhat

Record state

PUBLISHED

Severity

Critical (CVSS 9.9)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

30cb554118fffc633d364c0dc239f90471fb0c535bb2cb8157fdc3097666a347

VendorProductVersionsPlatforms

access.redhat.comhttps://access.redhat.com/security/cve/CVE-2026-66785vdb-entryx_refsource_REDHAT
bugzilla.redhat.comRHBZ#2507530https://bugzilla.redhat.com/show_bug.cgi?id=2507530issue-trackingx_refsource_REDHAT