Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:kubeedge:kubeedge:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

KubeEdge keadm Arbitrary File Write via Path Traversal

KubeEdge keadm utility contains a path traversal vulnerability (CVE-2026-62369) in its archive extraction function, allowing an attacker to overwrite arbitrary files on Windows systems during edge node join or installation.

keadm +2 vulnerability file-write path-traversal windows
1c
high advisory

Command Injection Vulnerability in KubeEdge NodeUpgradeJob

An authenticated remote code execution vulnerability (CVE-2026-62371) in the KubeEdge v1alpha2 API allows attackers to inject shell commands via the NodeUpgradeJob resource.

KubeEdge +1 vulnerability rce cloud-native
1t 1c