Login Request a demo
AK
Product
Apache Kafka
by Apache Software Foundation · last CVE Oct 28, 2026
19
CVEs
0
On KEV
9.1
Max CVSS
12
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 1High 3Medium 3Low 0
Severity
All severities19Critical1High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache Kafka to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-27818
8.8
1%
Jun 10
Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration
Affected: 2.3.0 through 3.9.0
CVE-2025-27819
7.5
1%
Jun 10
Apache Kafka: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration
Affected: 2.0.0 through 3.3.2
CVE-2024-27309
7.4
1%
Apr 12
Apache Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode
Affected: 3.5.0 through 3.5.2; 3.6.0 through 3.6.1
Showing 3