CVE-2021-28235

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.62% chance of exploitation in the next 30 days, 76th percentile

Published

2023-04-04

Updated

2026-07-09

Proof-of-concept exploits (1)

• h3ck13r/CVE-2021-282350★ · 2026-09-27

Security advisories

• advisories/GHSA-gmph-wf7j-9gcm
• etcd-io/etcd
• lucyxss/etcd-3.4.10-test/blob/master/temp4cj.png

References

• CVE Record
• NVD entry

Related

• CVE-2026-35204