Vulnerabilities in kumahq

3 results

CVE-2026-52724MEDIUMkuma-dp connects to control plane without verifying TLS certificate when no CA is configuredEPSS 0.4%CVE-2026-45021MEDIUMKuma: Default kuma-cp leaks admin token cross-origin via CORS wildcard + LocalhostIsAdminEPSS 0.3%CVE-2026-50166MEDIUMKuma: kumactl connects to control plane without verifying TLS certificate when no CA is configuredEPSS 0.3%