etcd records

11 published records for vendor etcd.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2021-28235Proof of concept	Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.etcd · etcd · CWE-287 Pre-auth Auth bypass	Critical9.8	—	1.6%	Apr 4, 2023
35Monitor	CVE-2026-33413No exploit	etcd: Authorization bypasses in multiple APIsetcd · etcd · CWE-862 Pre-auth Auth bypass Broken access control (IDOR)	High8.8	—	0.3%	Mar 26, 2026
33Monitor	CVE-2018-16886No exploit	etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control etcd · etcd · CWE-287 Pre-auth Auth bypass	High8.1	—	4.0%	Jan 14, 2019
32Monitor	CVE-2026-59818No exploit	etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocationetcd · etcd · CWE-295 Weak crypto	High8.1	—	0.4%	Jul 8, 2026
31Monitor	CVE-2022-34038No exploit	Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go.etcd · etcd · CWE-787 Pre-auth Memory safety Denial of service	High7.5	—	1.8%	Aug 22, 2023
28Monitor	CVE-2020-15113No exploit	Improper Preservation of Permissions in etcdetcd · etcd · CWE-281	High7.1	—	0.2%	Aug 5, 2020
26Monitor	CVE-2020-15106No exploit	Improper Input Validation in etcdetcd · etcd · CWE-20 Denial of service	Medium6.5	—	1.3%	Aug 5, 2020
26Monitor	CVE-2020-15112No exploit	Improper Input Validation in etcdetcd · etcd · CWE-20 Denial of service	Medium6.5	—	1.3%	Aug 5, 2020
26Monitor	CVE-2026-33343No exploit	etcd: Nested etcd transactions bypass RBAC authorization checksetcd · etcd · CWE-863 Broken access control (IDOR)	Medium6.5	—	0.3%	Mar 26, 2026
17Monitor	CVE-2023-32082No exploit	etcd key name can be accessed via LeaseTimeToLive APIetcd · etcd · CWE-200 Info leak	Medium4.3	—	0.7%	May 11, 2023
17Monitor	CVE-2026-44283No exploit	etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checksetcd · etcd · CWE-863 Broken access control (IDOR)	Medium4.3	—	0.3%	May 14, 2026

CVE-2021-28235
39Monitor
Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.
CriticalCVSS 9.8Proof of conceptEPSS 2%
- Pre-auth
- Auth bypass
etcd · etcdApr 4, 2023
CVE-2026-33413
35Monitor
etcd: Authorization bypasses in multiple APIs
HighCVSS 8.8No exploitEPSS 0%
etcd · etcdMar 26, 2026
CVE-2018-16886
33Monitor
etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control
HighCVSS 8.1No exploitEPSS 4%
- Pre-auth
- Auth bypass
etcd · etcdJan 14, 2019
CVE-2026-59818
32Monitor
etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation
HighCVSS 8.1No exploitEPSS 0%
- Weak crypto
etcd · etcdJul 8, 2026
CVE-2022-34038
31Monitor
Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go.
HighCVSS 7.5No exploitEPSS 2%
etcd · etcdAug 22, 2023
CVE-2020-15113
28Monitor
Improper Preservation of Permissions in etcd
HighCVSS 7.1No exploitEPSS 0%
etcd · etcdAug 5, 2020
CVE-2020-15106
26Monitor
Improper Input Validation in etcd
MediumCVSS 6.5No exploitEPSS 1%
- Denial of service
etcd · etcdAug 5, 2020
CVE-2020-15112
26Monitor
Improper Input Validation in etcd
MediumCVSS 6.5No exploitEPSS 1%
- Denial of service
etcd · etcdAug 5, 2020
CVE-2026-33343
26Monitor
etcd: Nested etcd transactions bypass RBAC authorization checks
MediumCVSS 6.5No exploitEPSS 0%
- Broken access control (IDOR)
etcd · etcdMar 26, 2026
CVE-2023-32082
17Monitor
etcd key name can be accessed via LeaseTimeToLive API
MediumCVSS 4.3No exploitEPSS 1%
- Info leak
etcd · etcdMay 11, 2023
CVE-2026-44283
17Monitor
etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
etcd · etcdMay 14, 2026