Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:apache:kafka:*:*:*:*:*:*:*:*

4 briefs RSS
low advisory

Apache Kafka: Kafka Streams denial of service via integer overflow (CVE-2026-111496)

An integer overflow vulnerability in Apache Kafka Streams allows an attacker to cause a StreamThread hang by supplying a record with a near-maximum timestamp.

Kafka Streams
1c
medium advisory

Apache Kafka: Configuration provider values exposed in Kafka Connect validation endpoint (CVE-2026-116593)

A vulnerability in the Kafka Connect configuration validation REST API allows an attacker to exfiltrate sensitive secrets intended to be resolved only at runtime.

Kafka Connect +1 webserver information-disclosure cve-2026-116593
1t 1c
high advisory

Apache Kafka: Unauthorized arbitrary file and environment variable read (CVE-2026-112375)

An authenticated principal in Apache Kafka can leverage crafted IncrementalAlterConfigs or AlterConfigs requests to perform arbitrary file and environment variable reads from the broker host.

Kafka +6 denial-of-service vulnerability backend cve-2026-83525
4t 3c
medium advisory

Denial of Service Vulnerability in Apache Kafka

A vulnerability in Apache Kafka allows a remote, unauthenticated attacker to trigger a Denial of Service condition by exploiting CVE-2024-27309.

Kafka vulnerability denial-of-service apache-kafka
1t 1c