Is CVE-2026-47692 actively exploited?

No active exploitation of CVE-2026-47692 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-47692 be exploited remotely?

Partially. CVE-2026-47692 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2026-47692?

CVE-2026-47692 has a CVSS score of 4.3 (MEDIUM).

HOME VULNERABILITIESCVE-2026-47692

MEDIUM

CVE-2026-47692

CWE-130Published: June 26, 2026· Updated: Jun 27, 2026

4.3

CVSS v3.1

EPSS:0.22%probability of exploitation in 30 daysPercentile:12.2th

Official Description

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, PROXY Protocol v2 header generator emits TLVs beyond the maximum length of 65535 bytes, causing a mismatch between bytes written and the length field in the header. This can result in smuggled bytes on the upstream request. This vulnerability is fixed in 1.35.13, 1.36.9, 1.37.5, and 1.38.3.

NVD Source

Technical Analysis

CVE-2026-47692 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.