Security1 hOctober 26, 2026, 03:00

ZoomEye finds 62,236 Argo CD instances exposed online

A ZoomEye scan on 26 October 2026 found 62,236 hosts with an Argo CD fingerprint, but only 497 answer on the documented port 8080. Some 25,079 hosts respond on 443, while port 8080 is open on 55.2 million hosts overall.

DEV Community

Open source

ZoomEye finds 62,236 Argo CD instances exposed online

62,236 hosts carry the Argo CD fingerprint; only 497 answer on port 8080
25,079 Argo CD instances respond on port 443 with TLS
Port 8080 is open on 55.2 million hosts, 886 times the Argo CD count
An exposed Argo CD with the default admin password risks cluster takeover

#ArgoCD#ZoomEye#Kubernetes

Argo CD: four critical flaws, three without CVE IDs

Software

Argo CD 3.5.3 lets app-of-apps wave pass a child with a missing resource

Software

Argo CD 3.5 adds internal mTLS and signed-commit verification

Security

ZoomEye finds 62,236 Argo CD instances exposed online

Argo CD: four critical flaws, three without CVE IDs

Argo CD 3.5.3 lets app-of-apps wave pass a child with a missing resource

Argo CD 3.5 adds internal mTLS and signed-commit verification

Argo CD fixes four CVSS 9.9 flaws in repo-server and AppProject