CRITICAL 9.1 NVD

CVE-2026-11751

A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disabled, allowing man-in-

A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disabled, allowing man-in-the-middle attacks against xDS-managed upstream connections.

References

https://github.com/line/armeria/security/advisories/GHSA-6qfw-3mvj-m6v5
https://line.github.io/security-advisory-blog/CVE-2026-11751/

Published: 2026-08-19 · Source: NVD · Feed updated: 2026-08-19

This critical severity vulnerability with a CVSS score of 9.1 was published on 2026-08-19 via NVD.

Risk Timeline

CVE Disclosed2026-08-19 · -1 days ago

Remediation Resources

Official Advisory

line.github.io/security-advisory-blog/CVE-2026-11751/

GitHub

github.com/line/armeria/security/advisories/GHSA-6qfw-3mvj-m6v5

vulnfeed aggregates 11955 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.