CVE-2022-21654

score

<0.1

cvss

7.4

epss

1.1%

published

2022-02-22

kev added

—

first seen

2026-10-21

Envoy contains a TLS configuration issue that allows re-use when some certificate validation settings have changed from defaults, letting potential attackers bypass security checks, exploit requires configuration changes.