kafka-connect-filestream-win

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · kafka-connect-filestream-win Write-up: https://abraxaslabs.tech/research/kafka-connect-filestream-win kafka-connect-filestream-win Class: File write / unauth file read-write Windows CLASSPATH leftover Reach: Remote...

CVE-2026-115644

A flaw was found in Apache Kafka Connect. When a dedicated network listener is configured for administrative services, configured security and authentication extensions are not applied to the administrative endpoints. An unauthenticated remote attacker with network access to this administrative...

SUSE CVE-2026-115644

Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners is configured with a separate listener from the main listeners property. When operators isolate the admin REST API by explicitly configuring the "admin.listeners" property, REST...

SUSE CVE-2026-116593

Apache Kafka Connect has the /connector-plugins/connector-type/config/validate endpoint on its REST API to validate connector configurations. Apache Kafka Connect also support Configuration Providers which enable to hide the values of sensitive configuration and only resolve them at runtime. An...

Linux Distros Unpatched Vulnerability : CVE-2026-115644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners is configured with a separate listener fr...

UBUNTU-CVE-2026-115644

Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners is configured with a separate listener from the main listeners property. When operators isolate the admin REST API by explicitly configuring the "admin.listeners" property, REST...

CVE-2026-115644

Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners is configured with a separate listener from the main listeners property. When operators isolate the admin REST API by explicitly configuring the "admin.listeners" property, REST...

CVE-2026-115644

Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners is configured with a separate listener from the main listeners property. When operators isolate the admin REST API by explicitly configuring the "admin.listeners" property, REST...

CVE-2026-116593

Apache Kafka Connect has the /connector-plugins/connector-type/config/validate endpoint on its REST API to validate connector configurations. Apache Kafka Connect also support Configuration Providers which enable to hide the values of sensitive configuration and only resolve them at runtime. An...

EUVD-2026-112174

Apache Kafka Connect has the /connector-plugins/connector-type/config/validate endpoint on its REST API to validate connector configurations. Apache Kafka Connect also support Configuration Providers which enable to hide the values of sensitive configuration and only resolve them at runtime. An...

CVE-2026-116593 Apache Kafka: Kafka Connect configuration provider values exposed via validation REST API endpoint

Apache Kafka Connect has the /connector-plugins/connector-type/config/validate endpoint on its REST API to validate connector configurations. Apache Kafka Connect also support Configuration Providers which enable to hide the values of sensitive configuration and only resolve them at runtime. An...

CVE-2026-116593

Apache Kafka Connect has the /connector-plugins/connector-type/config/validate endpoint on its REST API to validate connector configurations. Apache Kafka Connect also support Configuration Providers which enable to hide the values of sensitive configuration and only resolve them at runtime. An...

CVE-2026-116593

Apache Kafka Connect is vulnerable to the exposure of sensitive configuration values. The issue resides in the REST API endpoint /connector-plugins/{connector-type}/config/validate, which is used to validate connector configurations. While Configuration Providers are designed to hide sensitive va...

EUVD-2026-112173

Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners is configured with a separate listener from the main listeners property. When operators isolate the admin REST API by explicitly configuring the "admin.listeners" property, REST...

CVE-2026-115644

Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners is configured with a separate listener from the main listeners property. When operators isolate the admin REST API by explicitly configuring the "admin.listeners" property, REST...

CVE-2026-115644

Apache Kafka Connect contains an authentication bypass vulnerability in the admin REST API. When the admin.listeners property is configured as a separate listener from the main listeners property, REST extensions (e.g., BasicAuthSecurityRestExtension) specified via rest.extension.classes are not ...

CVE-2026-115644 Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST Extensions

Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners is configured with a separate listener from the main listeners property. When operators isolate the admin REST API by explicitly configuring the "admin.listeners" property, REST...

Apache Kafka security vulnerabilities

Security vulnerabilities exist in Apache Kafka Connect versions 2.4.0 through 4.2.2 and 4.3.0 through 4.3.2. These vulnerabilities stem from authentication bypass: when the admin.listeners management REST API is configured as an independent listener, the REST extensions specified via...

CVE-2026-116593: Undefined Security Weakness

Apache Kafka Connect has the /connector-plugins/connector-type/config/validate endpoint on its REST API to validate connector configurations. Apache Kafka Connect also support Configuration Providers which enable to hide the values of sensitive configuration and only resolve them at runtime. An...

CVE-2026-115644: Undefined Security Weakness

Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners is configured with a separate listener from the main listeners property. When operators isolate the admin REST API by explicitly configuring the "admin.listeners" property, REST...