CVE-2026-24281

🗓️ 07 Mar 2026 09:16:07Reported by [email protected]Type

CVE-2026-24281: ZooKeeper may fall back to reverse DNS in hostname verification; upgrade to disable reverse DNS.

Reporter	Title	Published	Views	Family All 91
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache ZooKeeper	24 Jun 202621:38	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerability in Apache Zookeeper affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-24281 CVE-2026-24308)	21 Jul 202618:15	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Management GUI, Cluster Export Services (CES) S3 or HDFS layer are now fixed in 5.2.3.8 and 6.0.1.0 or higher	5 Jun 202619:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SevOne Network Performance Management for July 2026	23 Jul 202617:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for April 2026 - Multiple CVEs addressed	29 May 202610:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in zookeeper-3.8.4.jar	28 Apr 202619:11	–	ibm
ATTACKERKB	CVE-2026-24281	7 Mar 202608:50	–	attackerkb
Tenable Nessus	Apache ZooKeeper 3.8.x < 3.8.6 / 3.9.x < 3.9.5 Multiple Vulnerabilities	12 Mar 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-24281	10 Mar 202600:00	–	nessus
BDU FSTEC	Уязвимость компонента ZKTrustManager централизованной службы для поддержки информации о конфигурации, именования, обеспечения распределенной синхронизации и предоставления групповых служб Apache ZooKeeper, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации	27 Jul 202600:00	–	bdu_fstec

NVD

Node

apache zookeeperRange3.8.0–3.8.6

apache zookeeperRange3.9.0–3.9.5

Source	Link
lists	www.lists.apache.org/thread/088ddsbrzhd5lxzbqf5n24yg0mwh9jt2
access	www.access.redhat.com/security/cve/CVE-2026-24281
openwall	www.openwall.com/lists/oss-security/2026/03/07/4
access	www.access.redhat.com/errata/RHSA-2026:8509
access	www.access.redhat.com/errata/RHSA-2026:14272
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/errata/RHSA-2026:10184
access	www.access.redhat.com/errata/RHSA-2026:34608
security	www.security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24281.json
access	www.access.redhat.com/errata/RHSA-2026:14276

15 Jul 2026 02:18Current

CVSS 3.17.4

EPSS0.00633