CVE-2026-62370 is a vulnerability in KubeEdge, an open-source system for extending native containerized application orchestration capabilities to hosts at Edge. From versions 1.0.0 until 1.21.2, 1.22.2, and 1.23.1, an authenticated malicious or compromised edge peer can repeatedly send crafted headers with excessive declared lengths, causing memory exhaustion, CloudHub process termination or restart loops [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-29T17:17:59.770Z and has not been modified since then. KubeEdge CloudCore through version 1.23.1 has an authentication bypass vulnerability in its node task status reporting mechanism. The CloudCore HTTPS server accepts node task status reports without verification, allowing attackers to manipulate [truncated]
