CVE-2024-45806

score

<0.1

cvss

6.5

epss

0.4%

published

2024-09-20

kev added

—

first seen

2026-10-21

Envoy contains a header manipulation vulnerability caused by default trust of RFC1918 private address ranges in internal trust boundaries, letting external clients potentially access or disrupt internal services, exploit requires environment with default configuration.