Log in Start free

kumahq

Products

ProductCVEsExploitedLatest
kuma3–Sep 15, 2026

Exploited and recent CVEs

  • CVE-2026-50166 Medium 5.5 Kuma: kumactl connects to control plane without verifying TLS certificate when no CA is configured 0.3%
  • CVE-2026-52724 Medium 5.8 kuma-dp connects to control plane without verifying TLS certificate when no CA is configured 0.4%
  • CVE-2026-45021 Medium 5.1 Kuma: Default kuma-cp leaks admin token cross-origin via CORS wildcard + LocalhostIsAdmin 0.3%