All 3 CVE vulnerabilities found in kuma, with AI-generated Chinese analysis, references, and POCs.
Vendor: kumahq
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-50166 | Kuma: kumactl connects to control plane without verifying TLS certificate when no CA is configured CWE-295 | 5.5 | Medium | 2026-09-15 |
| CVE-2026-52724 | kuma-dp connects to control plane without verifying TLS certificate when no CA is configured CWE-295 | 5.8 | Medium | 2026-09-15 |
| CVE-2026-45021 | Kuma: Default kuma-cp leaks admin token cross-origin via CORS wildcard + LocalhostIsAdmin CWE-346 | - | - | 2026-05-28 |
All 3 known CVE vulnerabilities affecting kuma with full Chinese analysis, references, and POCs where available.