kubeedge

Products

ProductCVEsExploitedLatest
kubeedge13–Sep 21, 2026

Exploited and recent CVEs

  • CVE-2026-62182 High 8.8 KubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodes 0.5%
  • CVE-2026-62369 High 8.1 KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join 0.6%
  • CVE-2026-62370 Medium 6.5 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub 0.5%
  • CVE-2026-62371 High 8.8 KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API 0.5%
  • CVE-2026-82473 High 8.2 KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints 0.6%
  • CVE-2022-31080 Medium 4.4 KubeEdge Websocket Client in package Viaduct: DoS from large response message 0.7%
  • CVE-2022-31079 Medium 4.4 KubeEdge Cloud Stream and Edge Stream DoS from large stream message 0.7%
  • CVE-2022-31078 Medium 4.4 KubeEdge CloudCore Router memory exhaustion 0.7%
  • CVE-2022-31075 Medium 4.9 KubeEdge DoS when signing the CSR from EdgeCore 1.0%
  • CVE-2022-31074 Medium 4.5 KubeEdge Cloud AdmissionController component DoS 0.8%
  • CVE-2022-31073 Medium 6.5 KubeEdge Edge ServiceBus module DoS 1.7%
  • CVE-2022-31077 Medium 4.0 Malicious response from KubeEdge can crash CSI Driver controller server 0.8%
  • CVE-2022-31076 Medium 4.2 Malicious Message can crash CloudCore in KubeEdge 0.6%