AK
Product
Apache Kafka
19
CVEs
0
On KEV
9.1
Max CVSS
12
New 30D
Severity mix
Critical 1High 3Medium 3Low 0
Watch
Add Apache Kafka to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33557 | 9.1 | Apr 20 | Apache Kafka: Missing JWT token validation in OAUTHBEARER authentication Affected: 4.1.0 through 4.1.1 |
| CVE-2025-27818 | 8.8 | Jun 10 | Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration Affected: 2.3.0 through 3.9.0 |
| CVE-2025-27819 | 7.5 | Jun 10 | Apache Kafka: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration Affected: 2.0.0 through 3.3.2 |
| CVE-2024-27309 | 7.4 | Apr 12 | Apache Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode Affected: 3.5.0 through 3.5.2; 3.6.0 through 3.6.1 |
| CVE-2026-33558 | 5.3 | Apr 20 | Apache Kafka, Apache Kafka Clients: Information Exposure Through Network Client Log Output Affected: 0.11.0 through 3.9.1; 4.0.0 |
| CVE-2024-56128 | 5.3 | Dec 18 | Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption Affected: 0.10.2.0 before 3.7.2; 3.8.0 |
| CVE-2026-41115 | 4.3 | Jun 2 | Apache Kafka: Improper Authorization in CONSUMER_GROUP_DESCRIBE API Affected: 4.0.0 through 4.3.0 |
| CVE-2026-114349 New | – | Oct 28 | Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches Affected: 0.11.0.0 through 4.1.2; 4.2.0 through 4.2.1; 4.3.0 through 4.3.1 |
| CVE-2026-112375 New | – | Oct 28 | Apache Kafka: Unauthorized principal can read arbitrary broker files via IncrementalAlterConfigs Affected: 3.2.0 through 4.1.2; 4.2.0 through 4.2.1; 4.3.0 through 4.3.1 |
| CVE-2026-116593 New | – | Oct 28 | Apache Kafka: Kafka Connect configuration provider values exposed via validation REST API endpoint Affected: 2.4.0 before 4.2.2; 4.3.0 before 4.3.2 |
| CVE-2026-115644 New | – | Oct 28 | Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST Extensions Affected: 2.4.0 before 4.2.2; 4.3.0 before 4.3.2 |
| CVE-2026-111551 New | – | Oct 28 | Apache Kafka: Denial of service in Kafka Streams and client deserializers via unbounded memory allocation Affected: 0.10.0.0 through 4.1.2; 4.2.0 through 4.2.1; 4.3.0 through 4.3.1; 0.10.0.0 through 4.1.2; 4.2.0 through 4.2.1; 4.3.0 through 4.3.1 |
| CVE-2026-111496 New | – | Oct 28 | Apache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuation Affected: 1.1.0 through 4.1.2; 4.2.0 through 4.2.1; 4.3.0 through 4.3.1 |
| CVE-2026-111115 New | – | Oct 28 | Apache Kafka: Broker OutOfMemoryError via tagged-field allocation amplification in flexible protocol request parsing Affected: 2.4.0 through 4.1.2; 4.2.0 through 4.2.1; 4.3.0 through 4.3.1 |
| CVE-2026-111108 New | – | Oct 28 | Apache Kafka: Broker OutOfMemoryError via array allocation amplification in code-generated protocol readers Affected: 3.3.0 through 4.1.2; 4.2.0 through 4.2.1; 4.3.0 through 4.3.1 |
| CVE-2026-111073 New | – | Oct 28 | Apache Kafka: PushTelemetry (KIP-714) metrics payloads are decompressed without a size limit, allowing a broker out-of-memory denial of service Affected: 3.7.0 through 4.1.2; 4.2.0 through 4.2.1; 4.3.0 |
| CVE-2026-110985 New | – | Oct 28 | Apache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configured Affected: 4.1.0 through 4.1.2; 4.2.0 through 4.2.1; 4.3.0 |
| CVE-2026-110952 New | – | Oct 28 | Apache Kafka: Broker does not enforce JWT issuer and audience validation for SASL/OAUTHBEARER by default Affected: 3.1.0 before 4.4.0 |
| CVE-2026-83525 New | – | Oct 28 | Apache Kafka: Incorrect boolean operator in FetchSnapshot RPC handler allows authenticated network clients to crash the KRaft controller via a malformed request. Affected: 2.8.0 before 4.2.2; 4.3.0 before 4.3.2 |
Showing 19