CVE-2026-15911-Confluent_Kafka

CVE-2026-15911: Disabled TLS Certificate Verification for HashiCorp Vault KMS in confluent-kafka Severity: High, CVSS 3.1 7.4 Vector v3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected: confluent-kafka = 2.8.0, = 2.14.2 Fixed in: 2.15.0 CWE: CWE-295 Improper Certificate Validation...

CLEANSTART-2026-VA86965 Security fix for GHSA-72hv-8253-57qq applied in: confluent-kafka 8.2.0-r0, cassandra-reaper-fips 4.0.2-r2, cassandra-reaper-fips 3.8.0-r3, cassandra-reaper-fips 4.1.1-r1, keycloak 26.4.7-r3

GHSA-72hv-8253-57qq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YB74715 Directory Traversal vulnerability in the extractFile method of org

Security vulnerability affects the confluent-kafka package. Directory Traversal vulnerability in the extractFile method of org...

Confluent Platform ksqlDB Unauthenticated CREATE SINK CONNECTOR to Root RCE — Detect

Fingerprint / reachability check for Confluent Platform ksqlDB Unauthenticated CREATE SINK CONNECTOR to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Confluent Platform ksqlDB Unauthenticated CREATE SINK CONNECTOR to Root RCE""" from kittysploit import from...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108378 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108378 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693577...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108379 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108379 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693578...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108383 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108383 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693579...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108384 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108384 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693580...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108380 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108380 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693582...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108385 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108385 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693583...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108377 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108377 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693584...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108375 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108375 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693585...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108376 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108376 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693575...

confluent-kafka-config (1.1.4), dc-avro (>=0.3.0, <=0.9.1) +3 more potentially affected by CVE-2026-108375 via dataclasses-avroschema (>=0.36.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.36.3, =0.3.0, =0.0.2, =0.1.15, =0.1.19 Source cves: CVE-2026-108375 Source advisory: MEND:CVE-2026-108375...

python313-confluent-kafka-2.15.1-1.1 on GA media (moderate)

python313-confluent-kafka-2.15.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:12006-1 Rating: moderate Cross-References: CVE-2026-15911 CVSS scores: CVE-2026-15911 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

OPENSUSE-SU-2026:12006-1 python313-confluent-kafka-2.15.1-1.1 on GA media

These are all security issues fixed in the python313-confluent-kafka-2.15.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-105715

These are all security issues fixed in the python313-confluent-kafka-2.15.1-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2026-15911

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

GHSA-8988-9CW3-XX77 vulnerabilities

Vulnerabilities for packages: datadog-agent, superset, jwt-tool, confluent-docker-utils, open-webui, py3-pipenv, kserve, py3-pip, kubeflow-pipelines-visualization-server, kubeflow-pipelines, pypy-3.10, py3-cassandra-medusa...

GHSA-GH4C-6FX4-QH6G vulnerabilities

Vulnerabilities for packages: datadog-agent, superset, jwt-tool, confluent-docker-utils, open-webui, py3-pipenv, kserve, py3-pip, kubeflow-pipelines-visualization-server, kubeflow-pipelines, pypy-3.10, py3-cassandra-medusa...