poc_CVE-2018-1002105

CVE-2018-1002105 PoC Authenticated PoC Demo Usage Unauthenticated PoC Demo Usage Authenticated PoC Proof-of-Concept exploit for CVE-2018-1002105. The current exploit requires create and get privileges on pods and pods/exec. Support has been added for portforward and attach, which require similar...

kubetcd

Kubetcd Wrapper of https://github.com/jpbetz/auger. It automates pod deployment by writing directly into etcd. It includes multiple functions for post-exploitation of compromised etcds. Disclaimer !WARNING This is a PoC, do not use it in a production environment. Writing directly to etcd may resu...

CLEANSTART-2026-JU24035 etcd is a distributed key-value store for the data of a distributed system

CVE-2026-73500 affects multiple packages. etcd is a distributed key-value store for the data of a distributed system. See references for individual vulnerability details...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: etcd: etcd-3.7.2-0.2.hum1 aarch64, s390x, x8664 etcd-3.7.2-0.2.hum1.src src...

CLEANSTART-2026-ST96789 etcd is a distributed key-value store for the data of a distributed system

Security vulnerability affects the loki package. etcd is a distributed key-value store for the data of a distributed system...

AZL-107378 CVE-2026-97032 affecting package etcd 3.5.33-1

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107369 CVE-2026-78669 affecting package etcd 3.5.33-1

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107366 CVE-2026-78663 affecting package etcd 3.5.33-1

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

AZL-107372 CVE-2026-78660 affecting package etcd 3.5.33-1

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-107375 CVE-2026-78659 affecting package etcd 3.5.33-1

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

com.github.lburgazzoli:hazelcast-discovery-dns (3.6-ea3), com.github.lburgazzoli:hazelcast-discovery-etcd (>=3.6-ea3, <=3.6-ea3.1) +11 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.6-ea3)

com.hazelcast:hazelcast MAVEN version 3.6-ea3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.github.lburgazzoli:hazelcast-discovery-dns 3.6-ea3 - com.github.lburgazzoli:hazelcast-discovery-etcd...

CLEANSTART-2026-CG80075 etcd is a distributed key-value store for the data of a distributed system

CVE-2026-73500 affects multiple packages. etcd is a distributed key-value store for the data of a distributed system. See references for individual vulnerability details...

CVE-2026-84445 affecting package etcd for versions less than 3.5.34-1

CVE-2026-84445 affecting package etcd for versions less than 3.5.34-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-84304 affecting package etcd for versions less than 3.5.34-1

CVE-2026-84304 affecting package etcd for versions less than 3.5.34-1. An upgraded version of the package is available that resolves this issue...

CLEANSTART-2026-MV90094 etcd is a distributed key-value store for the data of a distributed system

CVE-2026-73500 affects multiple packages. etcd is a distributed key-value store for the data of a distributed system. See references for individual vulnerability details...

CLEANSTART-2026-TI06135 etcd is a distributed key-value store for the data of a distributed system

Security vulnerability affects the grafana-alloy package. etcd is a distributed key-value store for the data of a distributed system...

PT-2026-108536

Security vulnerability affects the grafana-alloy package. etcd is a distributed key-value store for the data of a distributed system...

CLEANSTART-2026-IC69892 etcd is a distributed key-value store for the data of a distributed system

Security vulnerability affects the loki package. etcd is a distributed key-value store for the data of a distributed system...

Etcd RBAC Permission Bypass

The vulnerability of the RBAC permission checking mechanism when processing nested transaction operations for configuration store Etcd is related to deficiencies in the authorization mechanism. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to...

Configurable Storage Parameter Store Etcd RBAC Disclosure

The vulnerability of the RBAC authorization verification mechanism when processing configuration store transactions involving Etcd is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by this...