CVE-2026-15911-Confluent_Kafka

CVE-2026-15911: Disabled TLS Certificate Verification for HashiCorp Vault KMS in confluent-kafka Severity: High, CVSS 3.1 7.4 Vector v3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected: confluent-kafka = 2.8.0, = 2.14.2 Fixed in: 2.15.0 CWE: CWE-295 Improper Certificate Validation...

PT-2026-105715

These are all security issues fixed in the python313-confluent-kafka-2.15.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12006-1 python313-confluent-kafka-2.15.1-1.1 on GA media

These are all security issues fixed in the python313-confluent-kafka-2.15.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-97688 vulnerabilities

Vulnerabilities for packages: open-webui, kubeflow-pipelines-visualization-server, superset, kubeflow-pipelines, pypy-3.10, jwt-tool, py3-pip, py3-cassandra-medusa, kserve, confluent-docker-utils, py3-pipenv, datadog-agent...

GHSA-8988-9CW3-XX77 vulnerabilities

Vulnerabilities for packages: open-webui, kubeflow-pipelines-visualization-server, superset, kubeflow-pipelines, pypy-3.10, jwt-tool, py3-pip, py3-cassandra-medusa, kserve, confluent-docker-utils, py3-pipenv, datadog-agent...

CVE-2026-97687 vulnerabilities

Vulnerabilities for packages: open-webui, kubeflow-pipelines-visualization-server, superset, kubeflow-pipelines, pypy-3.10, jwt-tool, py3-pip, py3-cassandra-medusa, kserve, confluent-docker-utils, py3-pipenv, datadog-agent...

GHSA-GH4C-6FX4-QH6G vulnerabilities

Vulnerabilities for packages: open-webui, kubeflow-pipelines-visualization-server, superset, kubeflow-pipelines, pypy-3.10, jwt-tool, py3-pip, py3-cassandra-medusa, kserve, confluent-docker-utils, py3-pipenv, datadog-agent...

CVE-2026-15911

A flaw was found in confluent-kafka. The HashiCorp Vault Key Management Service KMS integration fails to properly validate Transport Layer Security TLS certificates by default. A remote attacker able to intercept network traffic could exploit this flaw to intercept and decrypt sensitive data or...

Improper Certificate Validation

Overview confluent-kafka is a high-level Producer, Consumer and AdminClient compatible with all Apache KafkaTM broker Affected versions of this package are vulnerable to Improper Certificate Validation in HcVaultKmsClient.init in...

CVE-2026-15911

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

EUVD-2026-91008

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

CVE-2026-15911 Confluent Kafka Python Improper TLS Certificate Validation

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

CVE-2026-15911 Confluent Kafka Python Improper TLS Certificate Validation

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

CVE-2026-15911

The Confluent Kafka Python client contains a vulnerability in its HashiCorp Vault KMS integration due to a failure to properly validate Transport Layer Security (TLS) certificates by default. A remote attacker capable of intercepting network traffic could exploit this flaw to intercept and decryp...

CVE-2026-15911: Improper Certificate Validation

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

PT-2026-103973

Name of the Vulnerable Software and Affected Versions confluent-kafka-python versions prior to 2.15.1 Description Improper TLS certificate validation in the HashiCorp Vault KMS integration may allow a remote attacker to obtain sensitive information. TLS Transport Layer Security is a cryptographic...

CVE-2026-68497 vulnerabilities

Vulnerabilities for packages: dependency-track, druid, seata, drain-cleaner, kafka-bridge-fips, apache-nifi-registry, apache-activemq, confluent-kafka, apache-tika, kserve-modelmesh, spark-fips, zookeeper, jenkins, thingsboard, jmeter, elasticsearch-fips, apache-activemq-fips, s3proxy-fips,...

GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: dependency-track, druid, seata, drain-cleaner, kafka-bridge-fips, apache-nifi-registry, apache-activemq, confluent-kafka, apache-tika, kserve-modelmesh, spark-fips, zookeeper, jenkins, thingsboard, jmeter, elasticsearch-fips, apache-activemq-fips, s3proxy-fips,...

GHSA-Q4XH-88C3-WMH7 vulnerabilities

Vulnerabilities for packages: dependency-track, druid, seata, drain-cleaner, kafka-bridge-fips, apache-nifi-registry, apache-activemq, confluent-kafka, apache-tika, kserve-modelmesh, spark-fips, zookeeper, jenkins, thingsboard, jmeter, elasticsearch-fips, apache-activemq-fips, s3proxy-fips,...

GHSA-WJGM-6HV5-3CVF vulnerabilities

Vulnerabilities for packages: dependency-track, druid, seata, drain-cleaner, kafka-bridge-fips, apache-nifi-registry, apache-activemq, confluent-kafka, apache-tika, kserve-modelmesh, spark-fips, zookeeper, jenkins, thingsboard, jmeter, elasticsearch-fips, apache-activemq-fips, s3proxy-fips,...