VulnSocial

CVE-2019-11248General(kubernetes / kubernetes)

LOWCVSS 8.2 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for kubernetes kubernetes systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for limited denial of service. Versions prior to 1.15.0, 1.14.4, 1.13.8, and 1.12.10 are affected. The issue is of medium severity, but not exposed by the default configuration.

kubernetes CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Weakness type (CWE)
CWE-419CWE-862

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • kubernetes

Threat summary

  • Active exploitation appears in 1 classified signals
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Peaked 2d ago at 1 mentions (2026-02-02); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
kubernetes
Products
kubernetes

15 versions affected across 1 product

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-02-02: 1Mentions · 2026-03-16: 1Mentions · 2026-06-04: 1Active Exploitation · 2026-06-04: 1Technical Details · 2026-06-04: 102-0203-1606-04
Signal classification2 categories
General
266.7%
Active Exploitation
133.3%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-02-021
General1
2026-03-161
General1
2026-06-041
Active Exploitation1
Full discourse3 posts
  • Alias Robotics@AliasRobotics
    Active Exploitation

    🚨 Myth busted: AI-augmented hackers aren't hunting sci-fi zero-days. The top bug in 26M prompts is a Kubernetes flaw from 2019 (CVE-2019-11248) & an Oracle RCE from 2017 (CVE-2017-10271). AI is mass-automating the exploitation of old technical debt. https://t.co/697p56ZNqN

    Post summary

    The tweet argues that AI‑driven attackers are focusing on legacy vulnerabilities, highlighting active exploitation of the Kubernetes CVE‑2019‑11248 and Oracle CVE‑2017‑10271, rather than seeking new zero‑days.

    10000105
    1.4K followersView on X
  • David@davidsheyi
    General

    6/ Stay informed about common vulnerabilities. CVE-2019-11248 highlights how improper configurations can be exploited in cloud setups #CyberSecurity #DevSecOps

    Post summary

    The tweet references CVE-2019-11248 and notes that improper configurations can be exploited in cloud setups, but provides no further technical, patch, or exploit details.

    1000021
    555 followersView on X
  • Masahiro Irie@IrieMasahiro
    General

    ESXi 上の etcd って吹っ飛ばしてもいいんだっけ…🤔 CVE-2019-11248 affects ESXi hosts https://knowledge.broadcom.com/external/article/406877

    Post summary

    The post merely notes that CVE‑2019‑11248 impacts ESXi hosts and includes a link, without offering any additional technical, exploit, or mitigation details.

    00000167
    422 followersView on X
CPE platform detail50 entries

50 of 50 entries

PartVendorProductVersionTarget SWTarget HW
Appkuberneteskubernetes---
Appkuberneteskubernetes1.13.0--
Appkuberneteskubernetes1.13.0--
Appkuberneteskubernetes1.13.0--
Appkuberneteskubernetes1.13.0--
Appkuberneteskubernetes1.13.0--
Appkuberneteskubernetes1.13.0--
Appkuberneteskubernetes1.13.0--
Appkuberneteskubernetes1.13.0--
Appkuberneteskubernetes1.13.0--
Appkuberneteskubernetes1.13.0--
Appkuberneteskubernetes1.13.1--
Appkuberneteskubernetes1.13.1--
Appkuberneteskubernetes1.13.2--
Appkuberneteskubernetes1.13.2--
Appkuberneteskubernetes1.13.3--
Appkuberneteskubernetes1.13.3--
Appkuberneteskubernetes1.13.4--
Appkuberneteskubernetes1.13.4--
Appkuberneteskubernetes1.13.5--
Appkuberneteskubernetes1.13.5--
Appkuberneteskubernetes1.13.6--
Appkuberneteskubernetes1.13.6--
Appkuberneteskubernetes1.13.7--
Appkuberneteskubernetes1.13.7--
Appkuberneteskubernetes1.13.8--
Appkuberneteskubernetes1.14.0--
Appkuberneteskubernetes1.14.0--
Appkuberneteskubernetes1.14.0--
Appkuberneteskubernetes1.14.0--
Appkuberneteskubernetes1.14.0--
Appkuberneteskubernetes1.14.0--
Appkuberneteskubernetes1.14.0--
Appkuberneteskubernetes1.14.0--
Appkuberneteskubernetes1.14.0--
Appkuberneteskubernetes1.14.1--
Appkuberneteskubernetes1.14.1--
Appkuberneteskubernetes1.14.2--
Appkuberneteskubernetes1.14.2--
Appkuberneteskubernetes1.14.3--
Appkuberneteskubernetes1.14.3--
Appkuberneteskubernetes1.14.4--
Appkuberneteskubernetes1.15.0--
Appkuberneteskubernetes1.15.0--
Appkuberneteskubernetes1.15.0--
Appkuberneteskubernetes1.15.0--
Appkuberneteskubernetes1.15.0--
Appkuberneteskubernetes1.15.0--
Appkuberneteskubernetes1.15.0--
Appkuberneteskubernetes1.15.0--

Explore more

Back to dashboardkubernetes CVEskubernetes vulnerabilities