Product by Kumahq

    Kuma

    3 known vulnerabilities in Kuma (Kumahq), 0 of them actively exploited (CISA KEV).

    Key figures

    3

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Kuma (Kumahq)
    MediumCVE-2026-52724

    kuma-dp connects to control plane without verifying TLS certificate when no CA is configured

    also in 2 other products

    		—
    MediumCVE-2026-50166

    Kuma: kumactl connects to control plane without verifying TLS certificate when no CA is configured

    also in 2 other products

    		—
    MediumCVE-2026-45021

    Kuma: Default kuma-cp leaks admin token cross-origin via CORS wildcard + LocalhostIsAdmin

    also in 1 other product

    		—

    All products by Kumahq