kedacore

Products

ProductCVEsExploitedLatest
keda3–Oct 14, 2026

Exploited and recent CVEs

  • CVE-2026-77524 Critical 9.9 KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication 0.6%
  • CVE-2026-53572 Medium 5.9 KEDA: PostgreSQL connection string parameter injection via incomplete whitespace escaping 0.4%
  • CVE-2025-68476 High 8.2 KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential 0.6%