kumahq kuma

• CVE-2026-50166 Medium 5.5 Kuma: kumactl connects to control plane without verifying TLS certificate when no CA is configured 0.3%
• CVE-2026-52724 Medium 5.8 kuma-dp connects to control plane without verifying TLS certificate when no CA is configured 0.4%
• CVE-2026-45021 Medium 5.1 Kuma: Default kuma-cp leaks admin token cross-origin via CORS wildcard + LocalhostIsAdmin 0.3%