CVE-2026-84303 is a medium severity vulnerability affecting the Kedacore http add-on, specifically in the gRPC-Go implementation. It impacts versions prior to 0.13.0-r2 and 0.14.0-r2. A fix is available in versions 0.13.0-r2 and 0.14.0-r2. No known exploits are reported in the wild.