SF
Product
streams for Apache Kafka 3
24
CVEs
0
On KEV
9.9
Max CVSS
4
New 30D
Severity mix
Critical 4High 17Medium 2Low 1
Watch
Add streams for Apache Kafka 3 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-105312 | 9.9 | Oct 20 | Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation Affected: All versions, or not specified |
| CVE-2026-27148 | 9.6 | Feb 25 | Storybook Dev Server Vulnerable to WebSocket Hijacking Affected: All versions, or not specified |
| CVE-2026-33557 | 9.1 | Apr 20 | Apache Kafka: Missing JWT token validation in OAUTHBEARER authentication Affected: All versions, or not specified |
| CVE-2026-2332 | 9.1 | Apr 14 | HTTP Request Smuggling via Chunked Extension Quoted-String Parsing Affected: All versions, or not specified |
Showing 4