CVE-2026-25804

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to versions 2.3.2 and 2.4.3, Antrea's network policy priority assignment system has a uint16 arithmetic overflow bug that causes incorrect OpenFlow priority calculations when handling a large numbers of policies with various priority values. This results in potentially incorrect traffic enforcement. This issue has been patched in versions 2.4.3.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-287 CWE-770

Affected software

No affected versions have been published.

Timeline

Published: Feb 6, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-258058.0Zed is a multiplayer code editor. Prior to 0.219.4, Zed does not show with which parameters a tool is being invoked, when asking for allowan CVE-2026-258066.5PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the GET /api/students/:email PUT /api/stud CVE-2026-258078.8ZAI Shell is an autonomous SysOps agent designed to navigate, repair, and secure complex environments. Prior to 9.0.3, the P2P terminal shar CVE-2026-258087.5Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 and 0.7.2, there is a CVE-2026-258099.8PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the code evaluation endpoint does not vali CVE-2026-25815.9This is an uncontrolled resource consumption vulnerability (CWE-400) that can lead to Denial of Service (DoS). In vulnerable Undici version CVE-2026-258109.1PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the backend/src/routes/student.submission.CVE-2026-258119.1PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application derives the tenant identif CVE-2026-258128.8PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application enables credentialed CORS CVE-2026-258137.5PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The application logs highly sensitive data CVE-2026-258149.8PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, User-controlled query parameters are passe CVE-2026-258153.2Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as exploited in the wild f