Vendor

Kubernetes

No Kubernetes CVE is in the CISA KEV catalogue.

Open KEV deadlines: 0
Added to KEV · 90 days: 0
High exploit odds · current: 0
Articles · 7 days: 0

Tracked since 3 Feb · No article names it yet · RSS · API

Little is recorded for Kubernetes yet

CyberSIXT lists a vendor once a CVE or an article names it. Exploited CVEs, coverage and patch cadence appear here as they are recorded.

All vendors Search articles

Exploited, by due date

No Kubernetes CVE is in the CISA KEV catalogue.

Patch cadence and exploit odds

How often CISA adds Kubernetes CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

CISA has not added a Kubernetes CVE to KEV.

Fix listed

2 of 2 CVEs in coverage

Every CVE in coverage has a fix recorded.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

Show as table

FIRST EPSS percentiles across CVEs in coverage
CVE	EPSS percentile
CVE-2024-10220	87.7
CVE-2025-9708	24

Bug bounty and attack surface

Kubernetes runs a public bug bounty or disclosure program. Its subdomains come from ProjectDiscovery's public Chaos dataset; only what the program's own scope says is in scope.

Kubernetes
Platform
HackerOne
Bounties
Pays
Assets in scope
82
Disclosed reports
77
Subdomains
662
In scope
2
Largest roots
Names suggest
Linked because same name, and the vendor's site is in the program's scope. Every subdomain, filtered on the program's page.

Coverage0 articles · all time

No CyberSIXT article names Kubernetes yet.

All CVEs in coverage2

Exploited first, then by EPSS

In the CVE tracker

Kubernetes CVEs in coverage
CVE	CISA KEV	CVSS	EPSS	Articles
CVE-2024-10220Arbitrary command execution through gitRepo volume	–	–	3.0%	–
CVE-2025-9708Kubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacks	–	–	0.3%	–