Skip to content
Etcd-io vulnerabilities
Newest
-
etcd-io etcd
etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline
CVE-2026-73500
Fix available
8.7 High
-
etcd-io etcd
etcd: Watch API authorization bypass via open-ended range requests
CVE-2026-73499
Fix available
7.1 High
-
etcd
etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation
CVE-2026-59818
Fix available
6.5 Medium
-
etcd
etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks
CVE-2026-44283
Fix available
0.0 None
-
etcd
etcd: Authorization bypasses in multiple APIs
CVE-2026-33413
Fix available
8.8 High
-
etcd
etcd: Nested etcd transactions bypass RBAC authorization checks
CVE-2026-33343
Fix available
0.0 None
-
etcd
etcd key name can be accessed via LeaseTimeToLive API
CVE-2023-32082
Fix available
3.1 Low
-
etcd-io etcd, fedoraproject fedora +1 more
Improper authentication in etcd
CVE-2020-15136
Fix available
6.5 Medium
-
etcd-io etcd, fedoraproject fedora +1 more
Denial of Service in etcd
CVE-2020-15114
Fix available
7.7 High
-
etcd-io etcd, fedoraproject fedora +1 more
No minimum password length in etcd
CVE-2020-15115
Fix available
5.8 Medium
-
etcd, fedoraproject fedora +1 more
Improper Preservation of Permissions in etcd
CVE-2020-15113
Fix available
5.7 Medium
-
etcd, fedoraproject fedora +1 more
Improper Input Validation in etcd
CVE-2020-15112
Fix available
6.5 Medium
-
etcd, fedoraproject fedora +1 more
Improper Input Validation in etcd
CVE-2020-15106
Fix available
6.5 Medium
-
etcd-io etcd, fedoraproject fedora +1 more
DNS Rebinding in etcd
CVE-2018-1099
Fix available
5.5 Medium
-
etcd-io etcd, fedoraproject fedora +1 more
etcd Cross-site Request Forgery (CSRF)
CVE-2018-1098
Fix available
8.8 High