CVE-2026-53572 is a medium severity vulnerability affecting the kedacore-http-add-on, a Kubernetes-based Event Driven Autoscaling component (KEDA). The flaw impacts versions prior to 0.13.0-r2 and 0.14.0-r2. It has a CVSS 3.1 base score of 5.9, indicating network attack vector with high complexity and low privileges required. The vulnerability allows high confidentiality impact and low integrity impact without affecting availability. Fixed versions 0.13.0-r2 and 0.14.0-r2 are available.