Sploitus

28 exploited vulnerabilities in Helm

Vulnerabilities with publicly known exploits

Vendors
Opensuse, Suse, Cleanstart, Alpaquita, Debian, Canonical
With known exploits
28
Affected Golang Crypto versions
< 0.52.0
Affected Helm versions
< 4.1.4, 3.17.4, 3.18.4
Affected Argoproj Argo Cd versions
< 2.1.9, 2.2.4
Affected Webhost Automation Helm Control Panel versions
= 3.1.10, 3.1.11, 3.1.12, 3.1.13, 3.1.14, 3.1.15, 3.1.16, 3.1.17, 3.1.18, 3.1.19

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2026-42506
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-42502
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-25680
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-46598
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-46597
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-39828
CVSS 9.8 CRITICAL 2026-05-22
CVE-2026-39827
CVSS 9.8 CRITICAL 2026-05-22
CVE-2024-26147
CVSS 8.7 HIGH 2024-02-21FIX AVAILABLE
CVE-2026-35204 2 exploits
CVSS 8.6 HIGH 2026-04-09FIX AVAILABLE
Exploit for Path Traversal in HelmExploit for Path Traversal in Helm
CVE-2025-53547 1 exploit
CVSS 8.6 HIGH 2025-07-08FIX AVAILABLE
Exploit for CVE-2025-53547
CVE-2020-11013
CVSS 8.5 HIGH 2020-04-24FIX AVAILABLE
CVE-2026-35205
CVSS 8.4 HIGH 2026-04-09FIX AVAILABLE
CVE-2025-55199
CVSS 7.8 HIGH 2025-08-13FIX AVAILABLE
CVE-2025-55198
CVSS 7.8 HIGH 2025-08-13FIX AVAILABLE
CVE-2025-32387
CVSS 7.8 HIGH 2025-04-09FIX AVAILABLE
CVE-2025-32386
CVSS 7.8 HIGH 2025-04-09FIX AVAILABLE
CVE-2022-24348
CVSS 7.7 HIGH 2022-02-04FIX AVAILABLE
CVE-2022-23526
CVSS 7.5 HIGH 2022-12-14FIX AVAILABLE
CVE-2019-1000008
CVSS 7.1 HIGH 2019-01-14FIX AVAILABLE
CVE-2026-63308
CVSS 6.5 MEDIUM 2026-07-17FIX AVAILABLE
CVE-2022-36055
CVSS 6.5 MEDIUM 2022-08-24FIX AVAILABLE
CVE-2024-25620
CVSS 6.4 MEDIUM 2024-02-14FIX AVAILABLE
CVE-2022-31036
CVSS 5.5 MEDIUM 2022-06-15FIX AVAILABLE
CVE-2022-23525
CVSS 5.3 MEDIUM 2022-12-14FIX AVAILABLE
CVE-2022-23524
CVSS 5.3 MEDIUM 2022-12-14FIX AVAILABLE
CVE-2026-35206
CVSS 4.8 MEDIUM 2026-04-09FIX AVAILABLE
CVE-2023-25165
CVSS 4.3 MEDIUM 2023-02-08FIX AVAILABLE
CVE-2004-1499 1 exploit
CVSS 4.3 MEDIUM 2004-12-31FIX AVAILABLE
WebHost Automation Helm Control Panel 3.1.x - Multiple Input Validation Vulnerabilities