Which versions of KubeEdge CloudCore are affected by CVE-2026-82473?

KubeEdge CloudCore versions up to 1.23.1 contain a critical vulnerability allowing unauthenticated attackers to remotely forge node task status reports, with publicly available exploit code in…

Is there a public PoC exploit available for CVE-2026-82473?

Yes, a public proof-of-concept exploit is available for CVE-2026-82473. Prioritise patching immediately. EPSS: 0.4%.

How to fix or mitigate CVE-2026-82473?

Within 24 hours: Immediately inventory all KubeEdge CloudCore deployments running version 1.23.1 or earlier and document network exposure, particularly port 10002. Within 7 days: Implement network-level access controls to restrict CloudCore port 10002 to authorized administration systems only using firewall rules or Kubernetes NetworkPolicies. Within 30 days: Upgrade to KubeEdge CloudCore version 1.24.0 or later as patches are released by the vendor; pending patch availability, deploy compensating controls including enhanced audit logging of node status changes, rate limiting on status report submissions, and out-of-band verification of upgrade status.

KubeEdge CloudCore CVE-2026-82473

Q: What is the CVSS score of CVE-2026-82473?

CVE-2026-82473 has a CVSS 4.0 base score of 8.8 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

EUVD-2026-68129 HIGH

Missing Authentication for Critical Function (CWE-306)

2026-08-29 VulnCheck

GHSA-7v3q-r4cr-w389

Authentication Bypass Kubeedge

8.8

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

8.8 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.2 HIGH

Network-reachable endpoint with no authentication (PR:N, AV:N, AC:L); integrity fully compromised via falsified upgrade state (I:H); limited availability impact as only scheduling is disrupted (A:L); no confidentiality impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

POC Analysis Generated

Aug 29, 2026 - 19:20 vuln.today

Analysis Generated

Aug 29, 2026 - 17:22 vuln.today

CVE Published

Aug 29, 2026 - 16:35 cve.org

HIGH 8.8

DescriptionCVE.org

KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark upgrade jobs as succeeded or failed, deceiving the control plane about node upgrade status and blocking further upgrade scheduling.

AnalysisAI

Unauthenticated integrity manipulation in KubeEdge CloudCore through 1.23.1 allows any network-reachable attacker to submit forged node task status reports to the CloudCore HTTPS server on port 10002, deceiving the Kubernetes edge control plane about the real state of node upgrade jobs. By falsely marking upgrades as succeeded or failed, an attacker can permanently block further upgrade scheduling for affected nodes without any credentials. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	The CloudCore HTTPS server port 10002 must be network-reachable from the attacker's position - no authentication, credentials, or session token of any kind is required to submit a node task status report. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 4.0 vector AV:N/AC:L/AT:N/PR:N/UI:N confirms the vulnerability is trivially exploitable from the network with no preconditions, no credentials, and no user interaction, producing a score of 8.8. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	No vendor-released patch version has been independently confirmed in the available data at time of analysis - the source code references point to the v1.23.1 tag, which is the last known vulnerable version. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours: Immediately inventory all KubeEdge CloudCore deployments running version 1.23.1 or earlier and document network exposure, particularly port 10002. …

Threat intelligence, references, and detailed analysis are available after sign-in.