Vulnerabilidades em kubeedge
13 resultadosAnálise Vexday
KubeEdge apresenta 8 vulnerabilidades catalogadas, nenhuma delas em exploração ativa conhecida ou com severidade crítica. A fraqueza dominante (CWE-400 - Controle Inadequado de Recursos) aponta para possíveis problemas de negação de serviço, e a ausência de publicações recentes sugere que o risco é estável e não está em evolução imediata.
CVE-2022-31073MEDIUMKubeEdge Edge ServiceBus module DoSEPSS 1.6%CVE-2022-31075MEDIUMKubeEdge DoS when signing the CSR from EdgeCoreEPSS 1.0%CVE-2022-31077MEDIUMMalicious response from KubeEdge can crash CSI Driver controller serverEPSS 0.8%CVE-2022-31074MEDIUMKubeEdge Cloud AdmissionController component DoSEPSS 0.8%CVE-2022-31080MEDIUMKubeEdge Websocket Client in package Viaduct: DoS from large response messageEPSS 0.7%CVE-2022-31078MEDIUMKubeEdge CloudCore Router memory exhaustionEPSS 0.7%CVE-2022-31079MEDIUMKubeEdge Cloud Stream and Edge Stream DoS from large stream messageEPSS 0.7%CVE-2026-62369HIGHKubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node joinEPSS 0.6%CVE-2022-31076MEDIUMMalicious Message can crash CloudCore in KubeEdgeEPSS 0.6%CVE-2026-62370MEDIUMKubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHubEPSS 0.5%CVE-2026-62371HIGHKubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 APIEPSS 0.5%CVE-2026-62182HIGHKubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodesEPSS 0.5%CVE-2026-82473HIGHKubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task EndpointsEPSS 0.4%