--- title: "Kubernetes vulnerabilities: CVEs, CISA KEV and security advisories" url: https://radicalnotion.ai/vendor/kubernetes type: vendor description: "Kubernetes has 140 published CVEs, 1 in CISA KEV and 28 with public exploits." updated: 2026-11-05 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Kubernetes vulnerabilities - **Published CVEs:** 140 - **In CISA KEV:** 1 - **With a public exploit:** 28 - **With a patch:** 137 - **Average CVSS:** 7.0 - **CVEs in the last two years:** 34 - **First CVE:** 2015-11-06 - **Latest CVE:** 2026-11-05 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 14 | | High | 52 | | Medium | 62 | | Low | 12 | | Unscored | 0 | ## Most affected products | Product | CVEs | | --- | --- | | [Kubernetes](https://radicalnotion.ai/vendor/kubernetes/kubernetes) | 78 | | [ingress-nginx](https://radicalnotion.ai/vendor/kubernetes/ingress-nginx) | 24 | | [cri-o](https://radicalnotion.ai/vendor/kubernetes/cri-o) | 10 | | [github.com/kubernetes/kubernetes](https://radicalnotion.ai/vendor/kubernetes/github-com-kubernetes-kubernetes) | 9 | | [Kubelet](https://radicalnotion.ai/vendor/kubernetes/kubelet) | 7 | | [Kubernetes ingress-nginx](https://radicalnotion.ai/vendor/kubernetes/kubernetes-ingress-nginx) | 4 | | [kube-apiserver](https://radicalnotion.ai/vendor/kubernetes/kube-apiserver) | 3 | | [Image Builder](https://radicalnotion.ai/vendor/kubernetes/image-builder) | 3 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 36 | | [CWE-532](https://radicalnotion.ai/cwe/cwe-532) | Insertion of Sensitive Information into Log File | 8 | | [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 6 | | [CWE-400](https://radicalnotion.ai/cwe/cwe-400) | Uncontrolled Resource Consumption | 4 | | [CWE-200](https://radicalnotion.ai/cwe/cwe-200) | Exposure of Sensitive Information to an Unauthorized Actor | 3 | | [CWE-284](https://radicalnotion.ai/cwe/cwe-284) | Improper Access Control | 3 | | [CWE-276](https://radicalnotion.ai/cwe/cwe-276) | Incorrect Default Permissions | 3 | | [CWE-59](https://radicalnotion.ai/cwe/cwe-59) | Improper Link Resolution Before File Access ('Link Following') | 3 | ## Assigning CNAs | CNA | CVEs | | --- | --- | | [kubernetes](https://radicalnotion.ai/cna/kubernetes) | 105 | | [redhat](https://radicalnotion.ai/cna/redhat) | 18 | | [mitre](https://radicalnotion.ai/cna/mitre) | 6 | | [Esri](https://radicalnotion.ai/cna/esri) | 4 | | [GitHub\_M](https://radicalnotion.ai/cna/github-m) | 2 | | [dwf](https://radicalnotion.ai/cna/dwf) | 2 | | [f5](https://radicalnotion.ai/cna/f5) | 1 | | [VulnCheck](https://radicalnotion.ai/cna/vulncheck) | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2019 | 17 | | 2020 | 16 | | 2021 | 12 | | 2022 | 10 | | 2023 | 24 | | 2024 | 12 | | 2025 | 17 | | 2026 | 17 | ## Latest CVEs | CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published | | --- | --- | --- | --- | --- | --- | --- | | CVE-2026-116472 | ingress-nginx mirror-target self-DOS | low | 2.7 | 0.4% | No | 2026-11-05 | | CVE-2026-2270 | StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation | medium | 5.9 | 0.3% | No | 2026-10-26 | | CVE-2026-76654 | Subpath symlinking on Windows nodes permits NTLM coercion | medium | 5.8 | 0.4% | No | 2026-10-26 | | CVE-2026-19444 | Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes | medium | 6.5 | 0.2% | No | 2026-09-28 | | CVE-2026-15687 | Path traversal via non-tar copyDirectoryFromPod | low | 2.7 | 0.4% | No | 2026-07-23 | | CVE-2026-13019 | Missing Authentication | critical | 9.8 | 0.8% | No | 2026-07-07 | | CVE-2026-13020 | Weak Password Recovery Mechanism in Portal for ArcGIS | critical | 9.8 | 0.5% | No | 2026-07-07 | | CVE-2026-33519 | Incorrect privilege assignment in Portal for ArcGIS | critical | 9.8 | 0.3% | No | 2026-04-21 | | CVE-2026-3864 | CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server | medium | 6.5 | 0.7% | No | 2026-03-20 | | CVE-2026-4342 | ingress-nginx comment-based nginx configuration injection | high | 8.8 | 1.5% | No | 2026-03-19 | | CVE-2026-3288 | ingress-nginx rewrite-target nginx configuration injection | high | 8.8 | 7.0% | No | 2026-03-09 | | CVE-2025-15566 | ingress-nginx auth-proxy-set-headers nginx configuration injection | high | 8.8 | 0.5% | No | 2026-02-06 | ## Frequently asked questions ### How many CVEs does Kubernetes have? Kubernetes has 140 published CVE records since 2015, including 34 in the last two years. ### How many Kubernetes CVEs are in CISA KEV? 1 of Kubernetes's CVEs is listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline. ### Which Kubernetes products have the most CVEs? The Kubernetes products with the most published CVEs are Kubernetes, ingress-nginx, cri-o, github.com/kubernetes/kubernetes, Kubelet. ### What are the most common weakness types in Kubernetes CVEs? Kubernetes's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-532 (Insertion of Sensitive Information into Log File), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-400 (Uncontrolled Resource Consumption). ### Are there public exploits for Kubernetes vulnerabilities? Yes — 28 of Kubernetes's CVEs have a known public exploit. ### How many critical Kubernetes vulnerabilities are there? Kubernetes has 14 critical and 52 high-severity CVEs. ### What is the average severity of Kubernetes CVEs? The average CVSS base score across Kubernetes's scored CVEs is 7.0. ## Related vendors - [NEC](https://radicalnotion.ai/vendor/nec) (141 CVEs) - [Tungsten Automation](https://radicalnotion.ai/vendor/tungsten-automation) (141 CVEs) - [ruby-lang](https://radicalnotion.ai/vendor/rubylang) (140 CVEs) - [AncoraThemes](https://radicalnotion.ai/vendor/ancorathemes) (140 CVEs) - [anisha](https://radicalnotion.ai/vendor/anisha) (140 CVEs) - [Avaya](https://radicalnotion.ai/vendor/avaya) (140 CVEs) - [Asterisk](https://radicalnotion.ai/vendor/asterisk) (139 CVEs) - [NLnet Labs](https://radicalnotion.ai/vendor/nlnet-labs) (139 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/kubernetes). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.