[ Vendor · 4 CVEs ]
kubeedge
CVEs affecting kubeedge published in the last 30 days, plus any kubeedge CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-62182 | 21 Sep 2026 | CVSS 8.8 | KubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodesKubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.21.0 until… | Fix |
| CVE-2026-62369 | 21 Sep 2026 | CVSS 8.1 | KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node joinKubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.16.0 until… | Fix |
| CVE-2026-62370 | 21 Sep 2026 | CVSS 6.5 | KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHubKubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.0.0 until… | Fix |
| CVE-2026-62371 | 21 Sep 2026 | CVSS 8.8 | KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 APIKubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.12.0 until… | Fix |