CVE-2026-15911-Confluent_Kafka

CVE-2026-15911: Disabled TLS Certificate Verification for HashiCorp Vault KMS in confluent-kafka Severity: High, CVSS 3.1 7.4 Vector v3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected: confluent-kafka = 2.8.0, = 2.14.2 Fixed in: 2.15.0 CWE: CWE-295 Improper Certificate Validation...

python313-confluent-kafka-2.15.1-1.1 on GA media (moderate)

python313-confluent-kafka-2.15.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:12006-1 Rating: moderate Cross-References: CVE-2026-15911 CVSS scores: CVE-2026-15911 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

PT-2026-105715

These are all security issues fixed in the python313-confluent-kafka-2.15.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12006-1 python313-confluent-kafka-2.15.1-1.1 on GA media

These are all security issues fixed in the python313-confluent-kafka-2.15.1-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-8988-9CW3-XX77 vulnerabilities

Vulnerabilities for packages: superset, confluent-docker-utils, py3-cassandra-medusa, pypy-3.10, open-webui, kubeflow-pipelines, datadog-agent, py3-pipenv, kserve, py3-pip, kubeflow-pipelines-visualization-server, jwt-tool...

GHSA-GH4C-6FX4-QH6G vulnerabilities

Vulnerabilities for packages: superset, confluent-docker-utils, py3-cassandra-medusa, pypy-3.10, open-webui, kubeflow-pipelines, datadog-agent, py3-pipenv, kserve, py3-pip, kubeflow-pipelines-visualization-server, jwt-tool...

CVE-2026-97687 vulnerabilities

Vulnerabilities for packages: superset, confluent-docker-utils, py3-cassandra-medusa, pypy-3.10, open-webui, kubeflow-pipelines, datadog-agent, py3-pipenv, kserve, py3-pip, kubeflow-pipelines-visualization-server, jwt-tool...

CVE-2026-97688 vulnerabilities

Vulnerabilities for packages: superset, confluent-docker-utils, py3-cassandra-medusa, pypy-3.10, open-webui, kubeflow-pipelines, datadog-agent, py3-pipenv, kserve, py3-pip, kubeflow-pipelines-visualization-server, jwt-tool...

CVE-2026-15911

A flaw was found in confluent-kafka. The HashiCorp Vault Key Management Service KMS integration fails to properly validate Transport Layer Security TLS certificates by default. A remote attacker able to intercept network traffic could exploit this flaw to intercept and decrypt sensitive data or...

agentlink (>=0.1.0, <=0.1.2.dev1), aineko (>=0.2.1, <=0.4.0) +100 more potentially affected by CVE-2026-15911 via confluent-kafka (>=2.0.2, <=2.14.2)

confluent-kafka PYPI version =2.0.2, =0.1.0, =0.2.1, =0.0.1, =0.0.1, =0.0.1, =1.8.0rc6, =1.7.0.dev1715246251, =1.7.0.dev1715246284, =2.1.6, =10.1.27, =0.0.1a0, =0.1.35, =0.1.67 and more Source cves: CVE-2026-15911 Source advisory: SNYK:PYTHON-CONFLUENTKAFKA-20417141...

Improper Certificate Validation

Overview confluent-kafka is a high-level Producer, Consumer and AdminClient compatible with all Apache KafkaTM broker Affected versions of this package are vulnerable to Improper Certificate Validation in HcVaultKmsClient.init in...

CVE-2026-15911

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

CVE-2026-15911 Confluent Kafka Python Improper TLS Certificate Validation

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

EUVD-2026-91008

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

CVE-2026-15911 Confluent Kafka Python Improper TLS Certificate Validation

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

citizenk (0.1.67), confluent-kafka-config (1.1.4) +40 more potentially affected by CVE-2026-15911 via confluent-kafka (>=2.6.2, <=2.14.2)

confluent-kafka PYPI version =2.6.2, =0.1.0, =1.34.3, =0.5.11, =0.1.6, =0.11.0, =0.1.0, =0.9.0, =1.0.0, =1.3.2, =0.4.0, =0.0.1, =5.7.157, =0.0.14, =0.3.0 and more Source cves: CVE-2026-15911 Source advisory: MEND:CVE-2026-15911...

CVE-2026-15911

The Confluent Kafka Python client contains a vulnerability in its HashiCorp Vault KMS integration due to a failure to properly validate Transport Layer Security (TLS) certificates by default. A remote attacker capable of intercepting network traffic could exploit this flaw to intercept and decryp...

PT-2026-103973

Name of the Vulnerable Software and Affected Versions confluent-kafka-python versions prior to 2.15.1 Description Improper TLS certificate validation in the HashiCorp Vault KMS integration may allow a remote attacker to obtain sensitive information. TLS Transport Layer Security is a cryptographic...

CVE-2026-15911: Improper Certificate Validation

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

CVE-2026-68497 vulnerabilities

Vulnerabilities for packages: kayenta-fips, thingsboard, kafbat-ui, camunda, confluent-kafka-jre-bcfips, mongodb-search, druid, apache-pulsar-fips, neo4j, knative-kafka-broker-fips, nacos, dependency-track, gradle, kafbat-ui-fips, apache-polaris-fips, traccar, zookeeper, opensearch-fips,...