Known Vulnerabilities for Envoy by Enphase
Listed below are 8 of the newest known vulnerabilities associated with "Envoy" by "Enphase".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-33726 json | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.14, 1.18.8,... | Not Provided | 2026-03-27 | 2026-03-27 |
| CVE-2026-32811 json | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. When using Heimdall in envoy gRPC decisi... | Not Provided | 2026-03-20 | 2026-03-21 |
| CVE-2026-31838 json | Istio is an open platform to connect, manage, and secure microservices. Prior to 1.29.1, 1.28.5, and 1.27.8, a vulnerability ... | Not Provided | 2026-03-10 | 2026-04-07 |
| CVE-2026-23941 json | Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Erlang OTP (inets httpd module) allo... | Not Provided | 2026-03-13 | 2026-04-06 |
| CVE-2025-23556 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in netbitsolutions Push En... | Not Provided | 2025-03-03 | 2026-04-01 |
| CVE-2023-33869 json | Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root comma... | 9.8 - CRITICAL | 2023-06-20 | 2023-06-28 |
| CVE-2020-25755 json | An issue was discovered on Enphase Envoy R3.x and D4.x (and other current) devices. The upgrade_start function in /installer/... | 8.8 - HIGH | 2021-06-16 | 2022-05-03 |
| CVE-2020-25754 json | An issue was discovered on Enphase Envoy R3.x and D4.x devices. There is a custom PAM module for user authentication that cir... | 7.5 - HIGH | 2021-06-16 | 2021-06-28 |
| CVE-2020-25753 json | An issue was discovered on Enphase Envoy R3.x and D4.x devices with v3 software. The default admin password is set to the las... | 9.8 - CRITICAL | 2021-06-16 | 2021-06-28 |
| CVE-2020-25752 json | An issue was discovered on Enphase Envoy R3.x and D4.x devices. There are hardcoded web-panel login passwords for the install... | 5.3 - MEDIUM | 2021-06-16 | 2021-06-24 |