Threats Tagged 'cve-2025-66220'
View all threats tagged with 'cve-2025-66220'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-66220'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2025-66220 is a medium severity vulnerability in Envoy proxy versions up to 1.36.2, where improper null termination in the mTLS certificate matcher allows certificates with embedded null bytes in OTHERNAME SAN values to be incorrectly accepted as valid. This flaw could lead to unauthorized access by bypassing certificate validation, impacting confidentiality and integrity without requiring user interaction but needing high privileges and network access. No known exploits are currently reported. European organizations using affected Envoy versions in their service mesh or edge proxy infrastructure should prioritize patching to prevent potential misuse. Countries with significant cloud, telecom, and financial sectors relying on Envoy are at higher risk. Mitigation involves upgrading to fixed versions once available and implementing strict certificate validation policies. The vulnerability’s CVSS score is 5.0, reflecting moderate risk due to the complexity of exploitation and limited scope of impact. Join the discussion | CVE Database V5 | 12/03/2025, 18:31:50 UTC Added: 12/03/2025, 18:59:19 UTC |
Showing 1 to 1 of 1 result