Proxy & AI Gateway CVE Ledger

Home › Guides › Proxy & AI Gateway CVE Ledger

✓ checked 14 October 2026 · sources: NVD CVE API, CISA Known Exploited Vulnerabilities catalog · method · caveats · download the data

Citrix NetScaler ADC and Gateway have 18 entries in CISA’s catalog of exploited vulnerabilities, more than the other 9 proxies and gateways we checked put together (5). CISA added 6 of them in 2026. Among the open-source tools, LiteLLM, a proxy for calling AI model APIs, has 47 CVEs in the National Vulnerability Database, 32 of them (68%) published in 2026. Across all 10 products we count 597 CVEs, 152 of them published this year.

CVEs, 10 products 597in CISA KEV 23published in the last 30 days 30

Headline numbers

1. NetScaler: 109 CVEs since 2013, 20 in 2026 and 10 in the 30 days to 14 October. CISA marks 4 of its 18 KEV entries as known to have been used in ransomware campaigns.
2. Envoy had 13 CVEs published in the last 30 days, all on 21 September 2026. NVD rates 8 of them high and 5 medium; the descriptions say they are fixed in Envoy 1.36.10, 1.37.6, 1.38.4 and 1.39.1. Over 2026 as a whole, Traefik (48) and Envoy (34) had the most CVEs published.
3. LiteLLM has 4 KEV entries. One is the March 2026 Trivy supply-chain compromise (CVE-2026-33634), which NVD also lists against LiteLLM and CISA lists under Trivy. The older proxies, HAProxy (40 CVEs since 2012) and Squid (149 since 2002), have no KEV entries.
4. Squid’s newest CVE is an HTTP/1.1 request-smuggling bug. NVD’s description of CVE-2026-61642, published on 13 October 2026, says versions from 3.3.0.1 to before 7.6 accepted a bare Transfer-Encoding identity header, which the HTTP specification prohibits, and that: “This problem allows a trusted client to perform an HTTP Request Smuggling attack when HTTP/1.1 is used”. The score NVD shows, from GitHub as the CVE numbering authority, is 7.7 (high, CVSS 3.1).
5. Traefik has a BasicAuth timing bug. NVD’s description of CVE-2026-88010, published on 22 September 2026, says that from version 3.6.11 until 3.7.13 concurrent requests can reveal whether a username exists in Basic authentication, adding: “Sequential checks remain cost-equalized” and “the issue does not disclose credentials or bypass authentication”. The score NVD shows, from GitHub, is 6.3 (medium, CVSS 4.0).
6. HAProxy’s newest CVE is an HTTP/3 smuggling bug. NVD’s description of CVE-2026-90678, published on 13 September 2026, says the result is “potential HTTP request smuggling on reused backend connections” and that it affects setups with an HTTP/3 (QUIC) frontend; “releases 3.2.x and earlier are unaffected”.

Updated 14 October 2026: added Squid’s CVE-2026-61642 (published 13 October) and a note on Traefik’s CVE-2026-88010 (published 22 September, already counted in the 13 October update). NVD hasn’t assigned CPEs to either yet, so both are matched from their descriptions, which name the product and the fixed version.

Updated 13 October 2026: added NetScaler, and added NVD product (CPE) searches to the keyword searches. That found CVEs whose descriptions don’t use the product name in a way the keyword search matches, raising LiteLLM from 35 to 47 CVEs and adding the HTTP/2 “Rapid Reset” bug (CVE-2023-44487) to Envoy and Traefik.

CVEs published in 2026

The ledger

Entries in CISA’s KEV catalog

Envoy CVEs in the last 30 days

For exploited bugs in routers, firewalls and VPN gateways, see Edge Devices in CISA’s KEV Catalog. For how compromised devices end up in proxy networks, see the residential proxy botnet timeline.

Method

On 14 October 2026 we searched NVD for each product two ways: by keyword, and by the product’s own CPE names. We kept a CVE if NVD lists one of those CPEs as vulnerable. NVD hadn’t yet assigned CPEs to many recent CVEs, so we read the descriptions of those without one and kept 27 that name the product itself as affected. We dropped CVEs in related but separate projects, such as HAProxy’s Kubernetes ingress controller, Roxy-WI, Envoy Gateway, service meshes, Squidex and Enphase Envoy firmware. For NetScaler we count the ADC and Gateway products (including their older Citrix ADC and Citrix Gateway names) but not NetScaler SD-WAN, Console or agents. Severity is the CVSS v3.x base severity, or v4.0 where that is the only score; 104 CVEs have no score yet. KEV status comes from CISA’s catalog, downloaded the same day. A separate script recomputes every number from the saved responses.

Caveats

• CVE counts measure reported and catalogued bugs. More users, more code and more security research all raise them, so a higher count doesn’t mean a product is less safe. NetScaler is a commercial appliance; the other nine are open-source software.
• One CVE can affect more than one product: the HTTP/2 Rapid Reset bug is counted for both Envoy and Traefik, and is the only KEV entry for each. Totals count it once.
• “Published” is the NVD publication date, not the date a bug was found or fixed.
• Recent CVEs without CPEs were matched by reading descriptions; a few could be misassigned. The CSV marks how each CVE was matched.
• KEV shows exploitation known to CISA. A product with no KEV entries may still have been attacked.
• This product uses data from the NVD API but is not endorsed or certified by the NVD.

Download the data

• Proxy and gateway CVEs (CSV): one row per product and CVE, with publication date, NVD status, severity, score, KEV status and match method.

Cite as: ProxyPicker, “Proxy & AI Gateway CVE Ledger”, 14 October 2026, https://proxypicker.com/proxy-gateway-cve-ledger/. Data: NVD, CISA KEV.

Related: Edge Devices in CISA’s KEV Catalog · Residential proxy botnet timeline · MASQUE Tracker.

Press & data requests: email [email protected] for interviews, the raw data behind this page, or corrections. See also our contact page.