CLEANSTART-2026-EZ90321 Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper s...

🗓️ 16 Apr 2026 00:40:49Reported by GoogleType

osv🔗 osv.dev👁 24 Views

kserve-modelmesh has vulnerabilities; ZKTrustManager may fall back to reverse DNS, enabling impersonation.

Reporter	Title	Published	Views	Family All 3958
OSV	CGA-H472-2XV3-XRP5	16 Dec 202515:29	–	osv
OSV	CGA-H47P-MPM7-9JWC	12 Mar 202600:39	–	osv
OSV	CGA-H47Q-Q5W2-G962	27 Mar 202601:47	–	osv
OSV	CGA-H47V-QRW5-3XJG	12 Mar 202601:22	–	osv
OSV	CGA-H48F-WG2P-J3HC	27 Mar 202601:41	–	osv
OSV	CGA-H4CP-GFXV-2PP2	16 Dec 202515:36	–	osv
OSV	CGA-H4GH-H6V9-W3WF	17 Mar 202600:50	–	osv
OSV	CGA-H4HC-G8QG-X5P6	23 Jan 202611:46	–	osv
OSV	CGA-H4WW-F4W8-4J5Q	5 Aug 202617:05	–	osv
OSV	CGA-H577-7FQX-877X	26 Mar 202623:28	–	osv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EZ90321.json
osv	www.osv.dev/vulnerability/CVE-2025-67735
osv	www.osv.dev/vulnerability/CVE-2025-68161
osv	www.osv.dev/vulnerability/CVE-2026-1225
osv	www.osv.dev/vulnerability/CVE-2026-24281
osv	www.osv.dev/vulnerability/CVE-2026-24308
osv	www.osv.dev/vulnerability/CVE-2026-33870
osv	www.osv.dev/vulnerability/CVE-2026-33871
osv	www.osv.dev/vulnerability/ghsa-25qh-j22f-pwp8
osv	www.osv.dev/vulnerability/ghsa-389x-839f-4rhx

23 Apr 2026 05:01Current

7.3High risk

Vulners AI Score7.3

CVSS 3.19.8

EPSS0.01177