AZ
Product
Apache ZooKeeper
by Apache Software Foundation · last CVE Sep 16, 2026
11
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 4Low 0
Watch

Add Apache ZooKeeper to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-84501
5.3
1%
Sep 16
Apache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProvider
Affected: 3.9.0 through 3.9.5; 3.8.0 through 3.8.6
CVE-2026-84439
5.3
1%
Sep 16
Apache ZooKeeper: Audit log injection via unsanitized output from multiple sources
Affected: 3.9.0 through 3.9.5; 3.8.0 through 3.8.6
CVE-2024-23944
5.3
0%
Mar 15
Apache ZooKeeper: Information disclosure in persistent watcher handling
Affected: 3.9.0 through 3.9.1; 3.8.0 through 3.8.3; 3.6.0 through 3.7.2
CVE-2025-58457
4.3
0%
Sep 24
Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands
Affected: 3.9.0 before 3.9.4
Showing 4