KE
Product
kestra
On CISA KEVExploited in the wild
14
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 5Low 0
Watch
Add kestra to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-49869 In wildKEV | 10.0 | Jun 26 | Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter` Affected: < 1.0.45; >= 1.1.0, < 1.3.21 |
| CVE-2026-53576 | 10.0 | Jun 26 | Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass Affected: < 1.0.45; >= 1.1.0, < 1.3.21 |
| CVE-2026-34612 | 9.0 | Apr 3 | Kestra: Remote Code Execution via SQL Injection Affected: < 1.3.7 |
Showing 3