CVE-2026-15738 | BDVDB-2026-347658 Detail
Amazonaws-load-balancer-controller
Description#
Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoof, or deny another namespace's gRPC traffic on a shared Gateway via a crafted HTTPRoute resource. To mitigate this issue, users should upgrade to version 3.4.2.
Impact#
CAPEC-154 Resource Location Spoofing
Weaknesses#
- CWE-653 Improper isolation or compartmentalization
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.