{"uuid": "12537823-cb3d-403b-8adb-44808ab78bbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73551", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117411074644649993", "content": "CVE-2026-73551 Envoy path normalization bypass lets /user/..;foo=bar/admin reach /admin uncanonicalized. CVSS 5.3. Patch to 1.36.10, 1.37.6, 1.38.4 or 1.39.1 now. https://www.valtersit.com/cve/CVE-2026-73551/ #Envoy #infosec #CVE", "creation_timestamp": "2026-10-09T13:00:35.761230Z"}