All 3 CVE vulnerabilities found in keda, with AI-generated Chinese analysis, references, and POCs.
Vendor: kedacore
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-77524 | KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication CWE-269 | 9.9 | Critical | 2026-10-14 |
| CVE-2026-53572 | KEDA: PostgreSQL connection string parameter injection via incomplete whitespace escaping CWE-74 | 5.9 | Medium | 2026-08-21 |
| CVE-2025-68476 | KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential CWE-22 | 6.5AI | Medium AI | 2025-12-22 |
All 3 known CVE vulnerabilities affecting keda with full Chinese analysis, references, and POCs where available.