VULNERABILITY INTELLIGENCE

CVE-2026-73511

CVSS score5.3 MEDIUM

EPSS probability0.11%

CISA KEVNot currently listed

Published2026-09-21

Last modified2026-10-05

Description

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy normally matches the raw request path, while servlet backends such as Apache Tomcat strip semicolon matrix parameters from each path segment before resolving the…