Known vulnerabilities in etcd
Vendor:
CoreOS
Software:
etcd
Software CPE:
cpe:2.3:a:coreos:etcd:*:*:*:*:*:*:*:*
Website:
https://coreos.com/
Total vulnerabilities:
22
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
3.7.1
3.6.14
3.5.33
3.7.0
3.6.13
3.5.32
3.6.12
3.5.31
3.4.45
3.6.11
3.5.30
3.4.44
3.6.10
3.5.29
3.4.43
3.6.9
3.5.28
3.4.42
3.6.8
3.5.27
3.4.41
3.6.7
3.5.26
3.4.40
3.6.6
3.5.25
3.4.39
3.5.24
3.4.38
3.6.5
3.5.23
3.6.4
3.6.3
3.5.22
3.6.2
3.6.1
3.6.0
3.4.37
3.5.21
3.5.20
3.5.19
3.4.36
3.5.18
3.5.17
3.4.35
3.4.34
3.5.16
3.5.15
3.4.33
3.5.14
3.4.32
3.5.13
3.4.31
3.4.30
3.5.12
3.4.29
3.5.11
3.4.28
3.5.10
3.4.27
3.4.26
3.5.9
3.4.25
3.5.8
3.4.24
3.5.7
3.4.23
3.5.6
3.5.1
3.4.22
3.5.5
3.4.21
3.4.20
3.4.19
3.5.4
3.5.3
3.5.2
3.4.16
3.2.32
3.4.15
3.4.14
3.4.12
3.3.25
3.4.13
3.2.31
3.3.24
3.4.11
3.4.10
3.4.9
3.4.8
3.4.7
3.4.6
3.4.5
3.4.4
3.4.3
3.4.2
3.4.1
3.4.0
3.3.23
3.3.22
3.3.21
3.3.20
3.3.19
3.3.18
3.3.17
3.3.16
3.3.15
3.3.14
3.3.13
3.3.12
3.3.11
3.3.10
3.3.9
3.3.8
3.3.7
3.3.6
3.3.5
3.3.4
3.3.3
3.2.30
3.2.29
3.2.28
3.2.27
3.2.26
3.2.25
3.2.24
3.2.23
3.2.22
3.2.21
3.2.20
3.2.19
3.1.20
3.1.19
3.1.18
3.1.17
3.1.16
3.1.15
3.1.14
3.0.17
2.3.7
2.3.6
2.3.5
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.2.5
2.2.4
2.2.3
2.2.2
2.2.1
2.2.0
2.1.3
2.1.2
2.1.1
2.1.0
2.0.13
2.0.12
2.0.11
2.0.10
2.0.9
2.0.8
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
0.4.9
0.4.8
0.4.7
0.4.6
0.4.5
0.4.4
0.4.3
0.4.2
0.4.1
0.4.0
0.3.0
0.2.0
0.1.2
0.1.1
0.1.0
3.3.2
3.3.1
3.3.0
3.2.18
3.2.17
3.2.16
3.2.15
3.2.14
3.2.13
3.2.12
3.2.11
3.2.10
3.2.9
3.2.8
3.2.7
3.2.6
3.2.5
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0
3.1.13
3.1.12
3.1.11
3.1.10
3.1.9
3.1.8
3.1.7
3.1.6
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.16
3.0.15
3.0.14
3.0.13
3.0.12
3.0.11
3.0.10
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
2.3.8
Vulnerabilities (22)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU139353 - Resource exhaustion CVE-2026-73500 |
CWE-400 | Medium | 3.5.33, 3.6.14, 3.7.1 | 24.07.2026 |
SB2026072473 |
||
| #VU139352 - Improper Authorization CVE-2026-73499 |
CWE-285 | Low | 3.5.33, 3.6.14, 3.7.1 | 24.07.2026 |
SB2026072473 |
||
| #VU139351 - Improper Certificate Validation CVE-2026-59818 |
CWE-295 | Low | 3.5.32, 3.6.13 | 24.07.2026 |
SB2026072472 |
||
| #VU130102 - Improper Access Control CVE-2026-33413 |
CWE-284 | Medium | 3.4.42, 3.5.28, 3.6.9 | 05.05.2026 |
SB2026050599 SB20260731108 |
||
| #VU130101 - Improper Access Control CVE-2026-33343 |
CWE-284 | Low | 3.4.42, 3.5.28, 3.6.9 | 05.05.2026 |
SB2026050599 |
||
| #VU64828 - Improper Authentication CVE-2018-16886 |
CWE-287 | Low | 3.2.26, 3.3.11 | 30.06.2022 |
SB2019011416 SB2019013140 SB2019060423 and 8 more |
||
| #VU42731 - Improper Authentication CVE-2020-15136 |
CWE-287 | Medium | 3.3.23, 3.4.10 | 11.08.2020 |
SB2020081020 SB2021031825 SB2020122606 |
||
| #VU41650 - Resource Management Errors CVE-2020-15106 |
CWE-399 | Medium | 3.3.23, 3.4.10 | 10.08.2020 |
SB2020081020 SB2021050608 SB2022092231 and 5 more |
||
| #VU41647 - Improper preservation of permissions CVE-2020-15113 |
CWE-281 | Low | 3.3.23, 3.4.10 | 10.08.2020 |
SB2020081020 SB2022092231 SB2022112104 and 5 more |
||
| #VU41624 - Resource Management Errors CVE-2020-15112 |
CWE-399 | Medium | 3.3.23, 3.4.10 | 10.08.2020 |
SB2020081020 SB2021050608 SB2022092231 and 5 more |
||
| #VU41617 - Weak Password Requirements CVE-2020-15115 |
CWE-521 | Medium | 3.3.23, 3.4.10 | 10.08.2020 |
SB2020081020 SB2021031825 SB2025020526 and 2 more |
||
| #VU41615 - Resource exhaustion CVE-2020-15114 |
CWE-400 | Medium | 3.3.23, 3.4.10 | 10.08.2020 |
SB2020081020 SB2022092231 SB2021031825 and 1 more |
||
| #VU130100 - Insufficient Logging |
CWE-778 | Low | 3.3.23, 3.4.10 | 05.08.2020 |
SB2020081020 |
||
| #VU130099 - Improper input validation |
CWE-20 | Low | 3.3.23, 3.4.10 | 05.08.2020 |
SB2020081020 |
||
| #VU130098 - Improper input validation |
CWE-20 | Medium | 3.3.23, 3.4.10 | 05.08.2020 |
SB2020081020 |
||
| #VU130095 - Improper Certificate Validation |
CWE-295 | Medium | 3.3.23, 3.4.10 | 05.08.2020 |
SB2020081020 |
||
| #VU130097 - Use of a Broken or Risky Cryptographic Algorithm |
CWE-327 | Medium | 3.4.22 | 05.08.2020 |
SB2020081020 |
||
| #VU130096 - Cleartext Storage of Sensitive Information |
CWE-312 | Low | 3.3.23, 3.4.10 | 05.08.2020 |
SB2020081020 |
||
| #VU130093 - Improper Authentication |
CWE-287 | Low | 3.3.23, 3.4.10 | 05.08.2020 |
SB2020081020 |
||
| #VU130094 - Improper Authentication |
CWE-287 | Low | 3.3.23, 3.4.10 | 05.08.2020 |
SB2020081020 |
Showing elements 1 - 20 out of 22