CVE-2026-105949

Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without calling setDenyUncoveredHttpMethodstrue. The servlet routes requests using Path.ofpathInfo.getFileName, which strips all leading segments and...

EUVD-2026-104965

Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without calling setDenyUncoveredHttpMethodstrue. The servlet routes requests using Path.ofpathInfo.getFileName, which strips all leading segments and...

CVE-2026-105949 Cruise-control: streams for apache kafka cruise control: authentication bypass via extra path segment allows unauthenticated access to all admin endpoints

Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without calling setDenyUncoveredHttpMethodstrue. The servlet routes requests using Path.ofpathInfo.getFileName, which strips all leading segments and...

CVE-2026-105949

Cruise Control for Apache Kafka is vulnerable to an authentication bypass due to a misconfiguration in the Jetty ConstraintSecurityHandler . The handler registers security constraints on exact path specifications but fails to use a catch-all wildcard constraint or call setDenyUncoveredHttpMethods...

CVE-2026-105949

Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without calling setDenyUncoveredHttpMethodstrue. The servlet routes requests using Path.ofpathInfo.getFileName, which strips all leading segments and...

PT-2026-118352

Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without calling setDenyUncoveredHttpMethodstrue. The servlet routes requests using Path.ofpathInfo.getFileName, which strips all leading segments and...

CVE-2026-106450 vulnerabilities

Vulnerabilities for packages: automq-fips, spark, dd-trace-java, automq, kafka, cruise-control, sonarqube, confluent-kafka-jre-bcfips, datahub-frontend, kayenta, apache-hop, wildfly, cassandra-reaper, pinot, pinot-fips, strimzi-kafka-operator, elasticsearch, apache-nifi, trino, datahub-gms-fips,...

GHSA-343H-94H5-C4WR vulnerabilities

Vulnerabilities for packages: automq-fips, spark, dd-trace-java, automq, kafka, cruise-control, sonarqube, confluent-kafka-jre-bcfips, datahub-frontend, kayenta, apache-hop, wildfly, cassandra-reaper, pinot, pinot-fips, strimzi-kafka-operator, elasticsearch, apache-nifi, trino, datahub-gms-fips,...

GHSA-GM45-99XC-R7WV vulnerabilities

Vulnerabilities for packages: automq-fips, spark, dd-trace-java, automq, kafka, cruise-control, sonarqube, confluent-kafka-jre-bcfips, datahub-frontend, kayenta, apache-hop, wildfly, cassandra-reaper, pinot, pinot-fips, strimzi-kafka-operator, elasticsearch, apache-nifi, trino, datahub-gms-fips,...

Extending Adaptive Cruise Control with Machine Learning Intrusion Detection Systems

An Adaptive Cruise Control ACC system automatically adjusts the host vehicle's speed to maintain a safe following distance from a lead vehicle. In typical implementations, a feedback controller e.g., a Proportional-Integral-Derivative PID controller computes the host vehicle's acceleration using ...