What’s Vulnerable › Products

kumahq kuma vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your kumahq kuma version is affected

Latest kumahq kuma vulnerabilities

• CVE-2026-52724 — kuma-dp connects to control plane without verifying TLS certificate when no CA is configured (CVSS 5.8)
• CVE-2026-50166 — Kuma: kumactl connects to control plane without verifying TLS certificate when no CA is configured (CVSS 5.5)
• CVE-2026-45021 — Kuma: Default kuma-cp leaks admin token cross-origin via CORS wildcard + LocalhostIsAdmin (CVSS 5.1)
• CVE-2024-36542 — (CVSS 8.8)