CVE-2026-59278

A flaw was found in Spring for Apache Kafka. The JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper components, which are used by default in @KafkaListener consumers, include java.net in their list of trusted packages. This allows a remote attacker, by sending a specially crafted message, to inje...

CVE-2025-27817

免責事項： 本稿で説明する脆弱性およびその再現手順は、ネットワークセキュリティの研究および教育目的のみを対象としています。本稿の情報を不正な目的や無許可のシステムテストに使用することは一切禁止します。著者は、本稿の情報の使用に起因する直接的または間接的損害について一切の責任を負いません。著作権侵害が発生した場合は、速やかにご連絡ください。速やかに処理し、関連する内容を削除いたします。 ブログアドレス： https://blog.csdn.net/xc214/article/details/148698902?spm=1001.2014.3001.5501 紛伝アドレス： 25hvv...

Apache Kafka Client - Arbitrary File Read

Apache Kafka Client contains arbitrary file read and server-side request forgery caused by untrusted configuration of sasl.oauthbearer.token.endpoint.url and sasl.oauthbearer.jwks.endpoint.url, letting attackers read files or send requests to unintended locations, exploit requires untrusted party...

kafka-keycloak-oauth

Apache Kafka 4.1.0 + Keycloak OAuth2 認証 Keycloak 26.1.1 OAuth2/OIDC 認証を備えた本番環境対応の Apache Kafka 4.1.0（KRaft モード）。Strimzi Kafka イメージを使用。 このプロジェクトが kafka-oauth-keycloak-tls-demo より優れている理由 これは以前の POC を大幅に改善した進化版 です： Strimzi OAuth 0.17.0 （旧 1.0.0 から変更）- Strimzi Kafka 0.48.0 イメージに同梱された安定版 カスタム Docker...

Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed in IBM Business Automation Manager Open Editions 9.6.0 Vulnerability Details CVEID:CVE-2026-59278 DESCRIPTION: JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include...

CVE-2026-59317

A flaw was found in Spring for Apache Kafka. The DeadLetterPublishingRecovererFactory component does not properly validate the retrytopic-original-timestamp header. A remote attacker can exploit this by sending a specially crafted message with a malformed header, leading to an infinite processing...

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

Overview apache-airflow-providers-apache-kafka is a Provider package apache-airflow-providers-apache-kafka for Apache Airflow Affected versions of this package are vulnerable to Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' in the importstring function. An...

CVE-2026-86792

Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's extra field into Python callables via importstring, with no allowlist, and hand them to the confluent-kafka client which invokes them. Deployments that have enabled the Kafk...

CVE-2026-86792 Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler via Kafka connection callback configuration

Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's extra field into Python callables via importstring, with no allowlist, and hand them to the confluent-kafka client which invokes them. Deployments that have enabled the Kafk...

EUVD-2026-80321

Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's extra field into Python callables via importstring, with no allowlist, and hand them to the confluent-kafka client which invokes them. Deployments that have enabled the Kafk...

CVE-2026-86792 Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler via Kafka connection callback configuration

Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's extra field into Python callables via importstring, with no allowlist, and hand them to the confluent-kafka client which invokes them. Deployments that have enabled the Kafk...

CVE-2026-86792 Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler via Kafka connection callback configuration

Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's extra field into Python callables via importstring, with no allowlist, and hand them to the confluent-kafka client which invokes them. Deployments that have enabled the Kafk...

CVE-2026-86792

The apache-airflow-providers-apache-kafka package (versions 1.15.0 before 2.0.0) is vulnerable to arbitrary code execution on the scheduler due to unsafe reflection. The root cause is the import_string function, which resolves dotted-path strings from a Kafka connection's extra field into Python ...

CVE-2026-86792: Use of Externally-Controlled Input to Select Classes or Code

Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's extra field into Python callables via importstring, with no allowlist, and hand them to the confluent-kafka client which invokes them. Deployments that have enabled the Kafk...

Security Bulletin: Multiple Vulnerabilities in watsonx.data

Summary Multiple vulnerabilities were addressed in watsonx.data 2.4.0 patch 5 version, which was present in different version from watson.data 2.4.0 Vulnerability Details CVEID:CVE-2026-41115 DESCRIPTION: An improper authorization vulnerability has been identified in Apache Kafka. The...

GHSA-6QM2-MCQ7-53QP vulnerabilities

Vulnerabilities for packages: ruby3.3-jrjackson, apache-tika-fips, reposilite, apache-pulsar-fips, management-api-for-apache-cassandra-5.0, camunda, apache-tika, tritonserver-backend-vllm-cuda-12.9, dependency-track-apiserver, gradle, apicurio-registry, ruby3.2-jrjackson, zookeeper-fips, druid,...

Security Bulletin: Security Vulnerability in Apache Kafka affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-35554, CVE-2026-33558)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the vulnerability. Vulnerability Details CVEID:CVE-2026-33558 DESCRIPTION: Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient component will output entire requests and responses...

CVE-2026-59278

JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted packages list. When these mappers are used — which is the default configuration for all @KafkaListener consumers — an external Kafka producer can inject a java.net.InetAddress type via the...

CVE-2026-59278: Server-Side Request Forgery (SSRF)

JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted packages list. When these mappers are used — which is the default configuration for all @KafkaListener consumers — an external Kafka producer can inject a java.net.InetAddress type via the...

CVE-2026-59317: Improper Validation of Specified Quantity in Input

DeadLetterPublishingRecovererFactory reads the retrytopic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new BigIntegerheader.value with no length or format validation. Spring for Apache Kafka 4.1.0 Spring for Apache Kafka 4.0.0 - 4.0.6 Spring for...