Tigera Calico Cloud vulnerabilities

• tigera calico, calico cloud, calico enterprise +2 more L7 policy bypass via unnormalized HTTP path matching CVE-2026-6540 7.9 HighJuly 30, 2026
• tigera calico, calico cloud, calico enterprise +2 more Calico Tier Authorization Bypass via DeleteCollection CVE-2026-41187 6.2 MediumJuly 30, 2026
• tigera calico, calico cloud, calico enterprise +2 more Unauthenticated Go pprof exposure in Calico debug server CVE-2026-41186 6.0 MediumJuly 30, 2026
• tigera calico, calico cloud, calico enterprise +2 more Calicoctl leaks cluster credentials to stderr when verbose logging is enabled CVE-2026-6720 Fix available 7.2 HighMay 28, 2026
• tigera calico, calico cloud, calico enterprise +2 more ServiceAccount token disclosure via Azure IPAM CNI plugin logs CVE-2026-41185 Fix available 6.0 MediumMay 28, 2026
• tigera calico, calico cloud, calico enterprise +2 more Privilege escalation in Calico CNI install binary CVE-2024-33522 Fix available 6.7 MediumApril 29, 2024