Threats tagged 'ghsa-fxcr-qwx6-5h7q'

CVE-2026-18674 is a vulnerability in Kong Inc.'s Kong Mesh affecting specific versions where the global control plane incorrectly attributes resources received over the zone-to-global KDS sync using a sender-controlled identifier rather than the authenticated zone identity. This flaw allows an authenticated zone to inject, attribute, and overwrite resources in another zone's namespace, resulting in a cross-zone isolation bypass.