https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:33:22 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-59818 <p><strong>Affected:</strong> Alpaquita:stream: etcd</p> <p><strong>Affected:</strong> Alpaquita:stream: etcd</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-59818 https://cve.radiocsirt.org/vuln/bit-etcd-2026-59818 <p><strong>Affected:</strong> Bitnami: etcd</p> <p>etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split HTTP and gRPC client endpoints onto separate listeners, the --client-crl-file Certificate Revocation List is not enforced on the gRPC listener, allowing a client with a revoked certificate to authenticate successfully over gRPC. This issue is fixed in versions 3.5.32 and 3.6.13.</p> <p><strong>Affected:</strong> Bitnami: etcd</p> <p>etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split HTTP and gRPC client endpoints onto separate listeners, the --client-crl-file Certificate Revocation List is not enforced on the gRPC listener, allowing a client with a revoked certificate to authenticate successfully over gRPC. This issue is fixed in versions 3.5.32 and 3.6.13.</p> https://cve.radiocsirt.org/vuln/bit-etcd-2026-59818 https://cve.radiocsirt.org/vuln/euvd-2026-335231 EUVD-2026-335231 https://cve.radiocsirt.org/vuln/euvd-2026-335231 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59818 <p>etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split HTTP and gRPC client endpoints onto separate listeners, the --client-crl-file Certificate Revocation List is not enforced on the gRPC listener, allowing a client with a revoked certificate to authenticate successfully over gRPC. This issue is fixed in versions 3.5.32 and 3.6.13.</p> <p>etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split HTTP and gRPC client endpoints onto separate listeners, the --client-crl-file Certificate Revocation List is not enforced on the gRPC listener, allowing a client with a revoked certificate to authenticate successfully over gRPC. This issue is fixed in versions 3.5.32 and 3.6.13.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-59818 https://cve.radiocsirt.org/vuln/msrc_cve-2026-59818 msrc_CVE-2026-59818 https://cve.radiocsirt.org/vuln/msrc_cve-2026-59818 https://cve.radiocsirt.org/vuln/rhsa-2026:44868 <p>etcd: etcd: Authenticated user can bypass RBAC for unauthorized data access etcd: etcd: Authentication bypass due to improper Certificate Revocation List enforcement on gRPC listener etcd: etcd: Denial of Service via unbounded TLS handshake goroutines</p> <p>etcd: etcd: Authenticated user can bypass RBAC for unauthorized data access etcd: etcd: Authentication bypass due to improper Certificate Revocation List enforcement on gRPC listener etcd: etcd: Denial of Service via unbounded TLS handshake goroutines</p> https://cve.radiocsirt.org/vuln/rhsa-2026:44868 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-59818 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: etcd, Ubuntu:Pro:18.04:LTS: etcd, Ubuntu:Pro:20.04:LTS: etcd, Ubuntu:Pro:22.04:LTS: etcd, Ubuntu:Pro:24.04:LTS: etcd, Ubuntu:25.10: etcd, Ubuntu:Pro:26.04:LTS: etcd</p> <p>etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split HTTP and gRPC client endpoints onto separate listeners, the --client-crl-file Certificate Revocation List is not enforced on the gRPC listener, allowing a client with a revoked certificate to authenticate successfully over gRPC. This issue is fixed in versions 3.5.32 and 3.6.13.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: etcd, Ubuntu:Pro:18.04:LTS: etcd, Ubuntu:Pro:20.04:LTS: etcd, Ubuntu:Pro:22.04:LTS: etcd, Ubuntu:Pro:24.04:LTS: etcd, Ubuntu:25.10: etcd, Ubuntu:Pro:26.04:LTS: etcd</p> <p>etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split HTTP and gRPC client endpoints onto separate listeners, the --client-crl-file Certificate Revocation List is not enforced on the gRPC listener, allowing a client with a revoked certificate to authenticate successfully over gRPC. This issue is fixed in versions 3.5.32 and 3.6.13.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-59818 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2243 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in etcd ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in etcd ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2243