CVE-2026-11751

UNKNOWN 0.0

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disabled, allowing man-in-the-middle attacks against xDS-managed upstream connections.

Vendor	ly corporation
Product	armeria
Published	Aug 19, 2026
Last Updated	Aug 19, 2026

Stay Ahead of the Next One

Get instant alerts for ly corporation armeria

Be the first to know when new unknown vulnerabilities affecting ly corporation armeria are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

LY Corporation / Armeria

All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗

line.github.io: https://line.github.io/security-advisory-blog/CVE-2026-11751/ github.com: https://github.com/line/armeria/security/advisories/GHSA-6qfw-3mvj-m6v5