etcd-io

Products

ProductCVEsExploitedLatest
etcd13–Aug 12, 2026

Exploited and recent CVEs

  • CVE-2026-73500 High 8.7 etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline 0.4%
  • CVE-2026-73499 High 7.1 etcd: Watch API authorization bypass via open-ended range requests 0.7%
  • CVE-2026-59818 Medium 6.5 etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation 0.4%
  • CVE-2026-44283 None 0.0 etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks 0.2%
  • CVE-2026-33413 High 8.8 etcd: Authorization bypasses in multiple APIs 0.3%
  • CVE-2026-33343 None 0.0 etcd: Nested etcd transactions bypass RBAC authorization checks 0.2%
  • CVE-2023-32082 Low 3.1 etcd key name can be accessed via LeaseTimeToLive API 0.7%
  • CVE-2020-15136 Medium 6.5 Improper authentication in etcd 1.7%
  • CVE-2020-15114 High 7.7 Denial of Service in etcd 1.1%
  • CVE-2020-15115 Medium 5.8 No minimum password length in etcd 1.3%
  • CVE-2020-15112 Medium 6.5 Improper Input Validation in etcd 1.3%
  • CVE-2020-15113 Medium 5.7 Improper Preservation of Permissions in etcd 0.2%
  • CVE-2020-15106 Medium 6.5 Improper Input Validation in etcd 1.3%