Open Source Kubernetes

Name: Open Source Kubernetes
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical3high3medium0low

updated 2026-10-27

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-1098US	—	86.1% (100th)	Exploit	no fix	2025-03-25	2 versions
CVE-2025-24514US	—	37.3% (99th)	Exploit	no fix	2025-03-25	2 versions
CVE-2025-1097US	—	37.0% (99th)	Exploit	no fix	2025-03-25	2 versions
CVE-2024-7646US	—	27.0% (98th)	Exploit	ingress-nginx controller v1.11.2	2024-08-16	< ingress-nginx controller v1.11.2
CVE-2021-25741US	high8.1	7.96% (95th)	Exploit	1.22.2	2021-09-20	4 versions
CVE-2026-3288US	—	6.55% (94th)	Exploit	no fix	2026-03-09	3 versions
CVE-2024-10220US	—	3.03% (87th)	Exploit	no fix	2024-11-22	4 versions
CVE-2024-3177US	—	2.22% (83rd)	Exploit	1.27.13	2024-04-22	3 versions
CVE-2023-2728US	medium6.5	2.16% (82nd)	Exploit	1.25.11	2023-07-03	4 versions
CVE-2026-4342US	high8.8	1.45% (73rd)	Exploit	no fix	2026-03-19	3 versions
CVE-2026-24514US	—	0.52% (44th)	Exploit	no fix	2026-02-03	2 versions
CVE-2025-24513US	—	3.33% (89th)	—	no fix	2025-03-25	2 versions
CVE-2024-9486US	critical9.8OT elevated	2.21% (82nd)	—	no fix	2024-10-15	≤ Image Builder <0.1.38
CVE-2024-9594US	high8.1OT elevated	1.73% (77th)	—	no fix	2024-10-15	≤ Image Builder <0.1.38
CVE-2024-9042US	—	1.40% (72nd)	—	no fix	2025-03-13	4 versions
CVE-2023-2727US	medium6.5	1.13% (66th)	—	1.27.3	2023-07-03	4 versions
CVE-2025-4563US	—OT elevated	0.83% (57th)	—	v1.32.6	2025-06-23	2 versions
CVE-2026-3864US	—	0.73% (54th)	—	no fix	2026-03-20	≤ CSI Driver for NFS <4.13.1
CVE-2025-5187US	—OT elevated	0.57% (47th)	—	no fix	2025-08-27	3 versions
CVE-2026-24512US	—	0.56% (46th)	—	no fix	2026-02-03	2 versions
CVE-2026-1580US	—	0.54% (45th)	—	no fix	2026-02-03	2 versions
CVE-2025-15566US	—	0.53% (44th)	—	no fix	2026-02-06	2 versions
CVE-2026-76654US	—	0.43% (37th)	—	no fix	2026-10-26	4 versions
CVE-2025-13281US	—	0.39% (33rd)	—	1.34.2	2025-12-14	3 versions
CVE-2025-7342US	—OT elevated	0.38% (31st)	—	no fix	2025-08-17	≤ Image Builder <v0.1.45
CVE-2025-0426US	—	0.37% (31st)	—	no fix	2025-02-13	4 versions
CVE-2026-24513US	—	0.34% (27th)	—	no fix	2026-02-03	2 versions
CVE-2026-2270US	—	0.34% (27th)	—	no fix	2026-10-26	4 versions
CVE-2024-5321US	—OT elevated	0.31% (24th)	—	1.29.7	2024-07-18	4 versions
CVE-2023-2431US	medium5.5	0.26% (17th)	—	1.27.2	2023-06-16	4 versions
CVE-2026-19444US	—	0.23% (14th)	—	no fix	2026-09-28	3 versions
CVE-2025-7445US	—	0.19% (9th)	—	no fix	2025-09-05	≤ secrets-store-sync-controller <0.0.2
CVE-2026-3865US	—	—	—	no fix	2026-04-15	≤ CSI Driver for SMB <1.20.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation16 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5 CVEs
CWE-15External Control of System or Configuration Setting3 CVEs
CWE-798Use of Hard-coded Credentials3 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-1287Improper Validation of Specified Type of Input1 CVEs
CWE-264CWE-2641 CVEs
CWE-276Incorrect Default Permissions1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan