CVE-2026-11751EPSS p22.4%

CVE-2026-11751CVE-2026-11751

Description

A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disabled, allowing man-in-the-middle attacks against xDS-managed upstream connections.

Scoring

EPSS0.32% probability of exploitation · percentile 22.4% · 2026-10-05T12:00:23Z
Last modified2026-08-28
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.