Topic
2 articles
CyberSecureToday covers Envoy Proxy across 2 articles published between 27 Sep 2026 and 12 Oct 2026.
The coverage includes 2 vulnerability advisories. 2 advisories are rated critical or high severity.
Stories on Envoy Proxy most often intersect with HashiCorp Consul, Service Mesh and mTLS, with Technology, Cloud & SaaS the most affected sector. The most recent story, “HashiCorp Consul Service Mesh Flaw Enables SPIFFE mTLS Identity Impersonation and Cross-Namespace Access (CVE-2026-77340)”, was published 12 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
VulnerabilityHashiCorp patches a critical flaw in Consul Service Mesh (CVE-2026-77340) allowing forged SPIFFE identity URIs to bypass mTLS intent enforcement.
GoogleGoogle Cloud Bulletin GCP-2026-057 warns of an Envoy Proxy safe_regex parsing flaw in Cloud Service Mesh causing negative RBAC authorization policies to fail open.