Skip to content
Threat Feed
Subscribe

Product

Redpanda (<= 26.2.2)

1 brief RSS
critical advisory

CVE-2026-82266: Unauthenticated Redpanda Admin API Access

Redpanda versions 26.2.2 and earlier insecurely expose the Admin API on port 9644 by default without authentication enabled, allowing remote attackers to perform superuser actions.

Redpanda vulnerability remote-code-execution api-security
1r 1t 1c