THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-82473 (HIGH 8.2) — KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark upgrade jobs as succeeded or failed, deceiving the control plane about node upgrade status and blocking

[NVD] CVE-2026-82473 (HIGH 8.2) — KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark upgrade jobs as succeeded or failed, deceiving the control plane about node upgrade status and blocking

mednvdPublished 2026-08-29

CVE-2026-82473 CVSS: 8.2 HIGH Published: 2026-08-29T17:17:59.770

KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark upgrade jobs as succeeded or failed, deceiving the control plane about node upgrade status and blocking further upgrade scheduling.

Indicators of compromise

CVE-2026-82473cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-82473