1356 matches found
CVE-2026-71576 Multicluster-global-hub: multicluster-global-hub: manager trusts self-asserted evt.source() for leaf-hub identity in all status handlers
A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client certificate, can manipulate the self-asserted source...
CVE-2026-71576
A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client certificate, can manipulate the self-asserted source...
CVE-2026-66801
A flaw was found in multicluster-global-hub. An attacker who compromises a managed hub can leverage its legitimate Kafka client certificate to publish a CloudEvent a specification for describing event data in a common way message to the shared gh-spec topic. This message can spoof its source as...
Photon OS 5.0: Kafka PHSA-2026-5.0-91-0855
An update of the kafka package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0855. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Kafka PHSA-2025-5.0-91-0537
An update of the kafka package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0537. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CLSA-2026-1783991065 TuxCare security update for org.apache.kafka (2 CVEs)
TuxCare rebuilt 56 org.apache.kafka packages to address 2 CVEs. Fixed in 3.7.1-tuxcare.1...
CLSA-2025-1752019395 TuxCare security update for org.apache.kafka (5 CVEs)
TuxCare rebuilt 47 org.apache.kafka packages to address 5 CVEs. Fixed in 3.2.3.tuxcare.1...
Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - IoT Component uses...
CLEANSTART-2026-QD76770 Security fixes in kafka 4.3.0-r0
Package kafka version 4.3.0-r0 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...
CLEANSTART-2026-XW77819 Security fixes in kafka 4.3.1-r1
Package kafka version 4.3.1-r1 fixes 16 vulnerabilities: ghsa-j3rv-43j4-c7qm, ghsa-rmj7-2vxq-3g9f, ghsa-5jmj-h7xm-6q6v, ghsa-9fxm-vc8v-hj55, ghsa-rcqc-6cw3-h962...
CLEANSTART-2026-NG34780 Security fixes in confluent-kafka 8.2.0-r1
Package confluent-kafka version 8.2.0-r1 fixes 3 vulnerabilities: ghsa-72hv-8253-57qq, ghsa-6fmv-xxpf-w3cw, CVE-2025-67030...
CLEANSTART-2026-FP77984 Security fixes in strimzi-kafka-operator 0.46.1-r3
Package strimzi-kafka-operator version 0.46.1-r3 fixes 10 vulnerabilities: CVE-2025-11143, CVE-2025-53864, CVE-2025-55163, CVE-2025-58056, CVE-2025-58057...
CLEANSTART-2026-OQ47178 Security fixes in kafka-fips 3.8.1-r9
Package kafka-fips version 3.8.1-r9 fixes 2 vulnerabilities: ghsa-6fmv-xxpf-w3cw, CVE-2025-67030...
CLEANSTART-2026-ND94997 Security fixes in kafka-ui 1.4.2-r5
Package kafka-ui version 1.4.2-r5 fixes 16 vulnerabilities: ghsa-w9fj-cfpg-grvv, ghsa-4773-3jfm-qmx3, ghsa-pwqr-wmgm-9rr8, ghsa-mf92-479x-3373, ghsa-6hcq-hmm3-jj3c...
CLEANSTART-2026-AB85050 Security fixes in kafka_exporter-fips 1.6.0-r0
Package kafkaexporter-fips version 1.6.0-r0 fixes 8 vulnerabilities: ghsa-8r3f-844c-mc37, CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730...
CLEANSTART-2026-QU19901 Security fixes in kafka 4.1.2-r0
Package kafka version 4.1.2-r0 fixes 10 vulnerabilities: CVE-2026-34477, ghsa-6hg6-v5c8-fphq, CVE-2026-34478, ghsa-445c-vh5m-36rj, CVE-2026-34479...
CLEANSTART-2026-XM95550 Security fixes in kafka_exporter-fips 1.7.0-r2
Package kafkaexporter-fips version 1.7.0-r2 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...
CLEANSTART-2026-XN43320 Security fixes in strimzi-kafka-operator 0.51.0-r1
Package strimzi-kafka-operator version 0.51.0-r1 fixes 11 vulnerabilities: CVE-2026-2332, CVE-2026-33871, CVE-2026-34477, CVE-2026-34478, CVE-2026-34480...
CLEANSTART-2026-GX65617 Security fixes in kafka_exporter-fips 1.6.0-r1
Package kafkaexporter-fips version 1.6.0-r1 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...