Apache Kafka
Related 12slug: apache-kafka
No explanation yet for this tag.
Vulnerabilities related to Apache Kafka 12
- Unrated When a broker decodes a compressed record batch, the per-record decoder reads a declared body... CVE-2026-114349
- Unrated An authenticated Kafka principal with no authorization grants (not even ALTER_CONFIGS) can make a... CVE-2026-112375
- Unrated Apache Kafka Connect has the /connector-plugins/{connector-type}/config/validate endpoint on its... CVE-2026-116593
- Unrated Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API... CVE-2026-115644
- Unrated Several Kafka deserialization paths read a size or count field from input data and use it... CVE-2026-111551
- Unrated Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next()... CVE-2026-111496
- Unrated Apache Kafka's code-generated readers for flexible protocol versions read a tagged-field count... CVE-2026-111115
- Unrated Apache Kafka's code-generated protocol readers pre-size an array's collection from the element... CVE-2026-111108
- Unrated The broker-side PushTelemetry API (KIP-714) validates only the compressed size of a client's... CVE-2026-111073
- Unrated A Kafka broker using SASL/OAUTHBEARER with the default validator (sasl.oauthbearer.jwt.validator... CVE-2026-110985
- Unrated A Kafka broker that authenticates clients with SASL/OAUTHBEARER using the bundled JWKS-backed... CVE-2026-110952
- Unrated Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apache Kafka from 2.8.0 before 4... CVE-2026-83525