CLEANSTART-2026-EZ90321 Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper s...

🗓️ 16 Apr 2026 00:40:49Reported by GoogleType

osv🔗 osv.dev👁 22 Views

kserve-modelmesh has vulnerabilities; ZKTrustManager may fall back to reverse DNS, enabling impersonation.

Reporter	Title	Published	Views	Family All 977
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Security QRadar EDR Software	11 Feb 202616:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-codec-http-4.1.129.Final.jar	28 Apr 202622:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services for June 2026- Multiple CVEs addressed	14 Jul 202606:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Processing is vulnerable to a CRLF injection vulnerability in Netty (CVE-2025-67735)	4 Jun 202607:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in netty-codec-4.1.124.Final.jar, netty-codec-http-4.1.108.Final.jar, netty-codec-http2-4.1.124.Final.jar affecting MongoDB Enterprised Advanced (CVE-2025-58056, CVE-2025-58057, CVE-2025-67735)	24 Feb 202619:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is affected by a vulnerability in the netty-codec-http library.(CVE-2026-33870).	3 Aug 202608:58	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now addressed in 5.2.3.8 or higher and 6.0.1.1 or higher	13 Aug 202616:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Log4j	6 Aug 202618:39	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Test Automation Server is vulnerable to request smuggling using CRLF injection due to netty-codec-http (CVE-2025-67735)	22 Apr 202613:57	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EZ90321.json
osv	www.osv.dev/vulnerability/CVE-2025-67735
osv	www.osv.dev/vulnerability/CVE-2025-68161
osv	www.osv.dev/vulnerability/CVE-2026-1225
osv	www.osv.dev/vulnerability/CVE-2026-24281
osv	www.osv.dev/vulnerability/CVE-2026-24308
osv	www.osv.dev/vulnerability/CVE-2026-33870
osv	www.osv.dev/vulnerability/CVE-2026-33871
osv	www.osv.dev/vulnerability/ghsa-25qh-j22f-pwp8
osv	www.osv.dev/vulnerability/ghsa-389x-839f-4rhx

23 Apr 2026 05:01Current

7.3High risk

Vulners AI Score7.3

CVSS 3.19.8

EPSS0.01177