etcd-io vulnerabilities

CVEs per yearBy the year they were published

1. 20206
2. 20231
3. 20266

Newest CVEs

• CVE-2026-73500

  etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline

  etcd-io · etcd

  High8.7
• CVE-2026-73499

  etcd: Watch API authorization bypass via open-ended range requests

  etcd-io · etcd

  High7.1
• CVE-2026-59818

  etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation

  etcd-io · etcd

  Medium6.5
• CVE-2026-44283

  etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks

  etcd-io · etcd

  None0.0
• CVE-2026-33413

  etcd: Authorization bypasses in multiple APIs

  etcd-io · etcd

  High8.8
• CVE-2026-33343

  etcd: Nested etcd transactions bypass RBAC authorization checks

  etcd-io · etcd

  None0.0
• CVE-2023-32082

  etcd key name can be accessed via LeaseTimeToLive API

  etcd-io · etcd

  Low3.1
• CVE-2020-15136

  Improper authentication in etcd

  etcd-io · etcd

  Medium6.5
• CVE-2020-15114

  Denial of Service in etcd

  etcd-io · etcd

  High7.7
• CVE-2020-15115

  No minimum password length in etcd

  etcd-io · etcd

  Medium5.8