Skip to content
Threat Feed
Subscribe

Tag

Kafka

2 briefs RSS
high threat

Missing Authorization Vulnerability in EFAK

Authenticated low-privileged users can exploit missing authorization checks in EFAK 5.1.0 and earlier to escalate privileges and perform administrative actions on managed Kafka clusters.

exploited EFAK web-application privilege-escalation kafka
1t 1c
high advisory

Public Exploit for Apache Camel CVE-2026-49098 Improper Input Validation

A public exploit has been released for CVE-2026-49098, an improper input validation vulnerability in Apache Camel's 'camel-kafka' component, which allows an attacker to perform message-header injection by supplying 'kafka.OVERRIDE_TOPIC' in HTTP headers, enabling cross-topic message injection and integrity compromise of sensitive Kafka topics.

Apache Camel +2 apache-camel vulnerability kafka injection
1t 1c