kubeedge vulnerabilities

CVEs per yearBy the year they were published

1. 20228
2. 20265

Newest CVEs

• CVE-2026-62182

  KubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodes

  kubeedge · kubeedge

  High8.8
• CVE-2026-62369

  KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join

  kubeedge · kubeedge

  High8.1
• CVE-2026-62370

  KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub

  kubeedge · kubeedge

  Medium6.5
• CVE-2026-62371

  KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API

  kubeedge · kubeedge

  High8.8
• CVE-2026-82473

  KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints

  kubeedge · kubeedge

  High8.8
• CVE-2022-31080

  KubeEdge Websocket Client in package Viaduct: DoS from large response message

  kubeedge · kubeedge

  Medium4.4
• CVE-2022-31079

  KubeEdge Cloud Stream and Edge Stream DoS from large stream message

  kubeedge · kubeedge

  Medium4.4
• CVE-2022-31078

  KubeEdge CloudCore Router memory exhaustion

  kubeedge · kubeedge

  Medium4.4
• CVE-2022-31075

  KubeEdge DoS when signing the CSR from EdgeCore

  kubeedge · kubeedge

  Medium4.9
• CVE-2022-31074

  KubeEdge Cloud AdmissionController component DoS

  kubeedge · kubeedge

  Medium4.5