CVE-2026-84439

A flaw was found in Apache ZooKeeper. When audit logging is enabled, an unauthenticated attacker can inject arbitrary fields into the audit log. This is achieved by sending a digest authentication request with tab characters embedded in the username, or by a client calling setACL with crafted...

CVE-2026-100300

A flaw was found in Apache ZooKeeper. An unauthenticated remote attacker can exploit improper handling of exceptions in the quota subsystem by writing to the default world-writable quota directory. This action crashes the primary request-processing thread and renders the on-disk data unbootable,...

CVE-2026-100302

A flaw was found in Apache ZooKeeper. An authenticated remote attacker can cause a Denial of Service DoS by submitting a request containing multiple bundled read operations for large data nodes. Because the multiRead handler does not restrict the cumulative response size generated in memory, the...

CVE-2026-100235

A flaw was found in Apache ZooKeeper. A time-of-check to time-of-use TOCTOU race condition during Access Control List ACL updates allows operations to be evaluated against outdated permissions. An attacker can exploit the timing window between an ACL update submission and its final commit to...

CVE-2026-100252

A flaw was found in Apache ZooKeeper. When Simple Authentication and Security Layer SASL authentication is enabled, the server fails to properly validate the authorization identity requested by a client against its authenticated credentials. An authenticated remote client can exploit this flaw by...

CVE-2026-115448

A flaw was found in Apache ZooKeeper. A remote attacker with permission to create data nodes znodes can build an excessively deep hierarchy of nested nodes, triggering uncontrolled recursion when the server saves a snapshot. This condition exhausts the call stack and terminates the snapshot...

zookeeper: Apache ZooKeeper: Improper certificate validation in FIPS mode allows quorum compromise

A flaw was found in Apache ZooKeeper. When operating in FIPS Federal Information Processing Standards mode with specific Transport Layer Security TLS settings enabled, ZooKeeper's quorum communication fails to properly verify the hostname of peer certificates. This vulnerability allows a maliciou...

zookeeper: Apache ZooKeeper: Operational log forgery via newline injection

A flaw was found in Apache ZooKeeper. An unauthenticated attacker can inject arbitrary fake log lines into the operational log by sending a specially crafted request containing newline characters. This vulnerability allows the attacker to forge complete log entries, including timestamps, log...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 XP 6.0.7.GA release

JBoss EAP XP 6.0.7.GA release on the EAP 8.1.9 base. See references for release notes. This is a cumulative patch release zip for the JBoss EAP XP 6.0.7 runtime distribution for use with EAP 8.1.9 Security Fixes: netty-codec-http2: Netty: HTTP/2 header field values are not validated by default...

CVE-2026-115448

Uncontrolled recursion in Apache ZooKeeper. The server serializes its data tree to a snapshot by recursing one stack frame per znode level, with no depth bound. A client permitted to create znodes the default root ACL is open can build a chain of nested znodes deep enough that taking a snapshot...

CVE-2026-100302

Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server denial of service with a single small request. The multiRead handler places no limit on the number of bundled read operations or on the cumulative...

CVE-2026-100252

Improper Authorization vulnerability in Apache ZooKeeper. When SASL authentication is enabled on the client port, the server's SASL callback handler grants every authorization identity authzid that a client requests, without checking it against the principal the client authenticated as. The serve...

CVE-2026-100300

Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write under the /zookeeper/quota subtree — unauthenticated on default deployments, where that subtree is world-writable — to crash the server's critical request-processing thread and...

CVE-2026-100235

Incorrect authorization due to a time-of-check to time-of-use TOCTOU race condition in the setACL request handling of Apache ZooKeeper. When a node's ACL is changed via setACL, the pending change is not published to the server's outstanding change record for that node. Any request that is prepare...

CVE-2026-100302 Apache ZooKeeper: Denial of service through unbounded memory allocation in multiRead request handling

Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server denial of service with a single small request. The multiRead handler places no limit on the number of bundled read operations or on the cumulative...

CVE-2026-100302

The Apache ZooKeeper multiRead request handler in version 3.7.0 through 3.9.6 is vulnerable to a denial of service (DoS) due to an Allocation of Resources Without Limits or Throttling (CWE-770) flaw. The multiRead handler does not limit the number of bundled read operations or the cumulative resp...

EUVD-2026-116870

Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server denial of service with a single small request. The multiRead handler places no limit on the number of bundled read operations or on the cumulative...

CVE-2026-100302

Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server denial of service with a single small request. The multiRead handler places no limit on the number of bundled read operations or on the cumulative...

CVE-2026-115448 Apache ZooKeeper: Unbounded recursion in snapshot serialization allows a client to render the server unrecoverable

Uncontrolled recursion in Apache ZooKeeper. The server serializes its data tree to a snapshot by recursing one stack frame per znode level, with no depth bound. A client permitted to create znodes the default root ACL is open can build a chain of nested znodes deep enough that taking a snapshot...

EUVD-2026-116869

Uncontrolled recursion in Apache ZooKeeper. The server serializes its data tree to a snapshot by recursing one stack frame per znode level, with no depth bound. A client permitted to create znodes the default root ACL is open can build a chain of nested znodes deep enough that taking a snapshot...