CVE-2026-105949

Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without calling setDenyUncoveredHttpMethodstrue. The servlet routes requests using Path.ofpathInfo.getFileName, which strips all leading segments and...

CVE-2026-105949 Cruise-control: streams for apache kafka cruise control: authentication bypass via extra path segment allows unauthenticated access to all admin endpoints

Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without calling setDenyUncoveredHttpMethodstrue. The servlet routes requests using Path.ofpathInfo.getFileName, which strips all leading segments and...

CVE-2026-105949 Cruise-control: streams for apache kafka cruise control: authentication bypass via extra path segment allows unauthenticated access to all admin endpoints

Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without calling setDenyUncoveredHttpMethodstrue. The servlet routes requests using Path.ofpathInfo.getFileName, which strips all leading segments and...

CVE-2026-105949

Cruise Control for Apache Kafka is vulnerable to an authentication bypass due to a misconfiguration in the Jetty ConstraintSecurityHandler . The handler registers security constraints on exact path specifications but fails to use a catch-all wildcard constraint or call setDenyUncoveredHttpMethods...

EUVD-2026-104965

Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without calling setDenyUncoveredHttpMethodstrue. The servlet routes requests using Path.ofpathInfo.getFileName, which strips all leading segments and...

CVE-2026-105949 Cruise-control: streams for apache kafka cruise control: authentication bypass via extra path segment allows unauthenticated access to all admin endpoints

Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without calling setDenyUncoveredHttpMethodstrue. The servlet routes requests using Path.ofpathInfo.getFileName, which strips all leading segments and...

CVE-2026-105949

Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without calling setDenyUncoveredHttpMethodstrue. The servlet routes requests using Path.ofpathInfo.getFileName, which strips all leading segments and...

PT-2026-118352

Name of the Vulnerable Software and Affected Versions Cruise Control affected versions not specified Description The Jetty ConstraintSecurityHandler registers security constraints on exact path specifications without a catch-all wildcard constraint and fails to call setDenyUncoveredHttpMethodstru...

GHSA-GM45-99XC-R7WV vulnerabilities

Vulnerabilities for packages: akhq, apache-hop-fips, sonarqube, automq, apache-pulsar, apache-hop, logstash, strimzi-kafka-operator-fips, wildfly, confluent-kafka-jre-bcfips, dd-trace-java, hono, datahub-frontend, seata, trino, conductor, kafbat-ui-fips, kafbat-ui, knative-kafka-broker-fips,...

CVE-2026-106450 vulnerabilities

Vulnerabilities for packages: akhq, apache-hop-fips, sonarqube, automq, apache-pulsar, apache-hop, logstash, strimzi-kafka-operator-fips, wildfly, confluent-kafka-jre-bcfips, dd-trace-java, hono, datahub-frontend, seata, trino, conductor, kafbat-ui-fips, kafbat-ui, knative-kafka-broker-fips,...

GHSA-343H-94H5-C4WR vulnerabilities

Vulnerabilities for packages: akhq, apache-hop-fips, sonarqube, automq, apache-pulsar, apache-hop, logstash, strimzi-kafka-operator-fips, wildfly, confluent-kafka-jre-bcfips, dd-trace-java, hono, datahub-frontend, seata, trino, conductor, kafbat-ui-fips, kafbat-ui, knative-kafka-broker-fips,...

CVE-2026-75907 CVE-2026-75907

The door access control on a Norwegian Cruise Line asset grants entry based only on the credential's static 7-byte UID stored on an NTAG212 NFC chip. A UID is a manufacturer serial number sent in the clear on every read and is not intended to be secret or to authenticate the holder. Validating on...

CVE-2026-75907 CVE-2026-75907

The door access control on a Norwegian Cruise Line asset grants entry based only on the credential's static 7-byte UID stored on an NTAG212 NFC chip. A UID is a manufacturer serial number sent in the clear on every read and is not intended to be secret or to authenticate the holder. Validating on...

CVE-2026-75907

The door access control system on Norwegian Cruise Line assets is vulnerable to improper authentication because it grants entry based solely on the static 7-byte UID of an NTAG212 NFC chip . Since the UID is a manufacturer serial number sent in the clear and lacks challenge-response capabilities ...

EUVD-2026-86156

The door access control on a Norwegian Cruise Line asset grants entry based only on the credential's static 7-byte UID stored on an NTAG212 NFC chip. A UID is a manufacturer serial number sent in the clear on every read and is not intended to be secret or to authenticate the holder. Validating on...

PT-2026-97916

Name of the Vulnerable Software and Affected Versions Norwegian Cruise Line door access controllers affected versions not specified Description An authentication bypass exists in RFID-based door access controllers where the system grants entry based solely on the static 7-byte UID of an NTAG212 N...

Norwegian Cruise Line door access controller contains an improper authentication vulnerability

Overview Door access controllers used on Norwegian Cruise Line NCL ships contain an improper authentication vulnerability that permits a replayed unique identifer UID from a radio-frequency identification RFID device to grant unauthorized entry to areas secured by these controllers. Description...

CVE-2026-75907: Improper Authentication

The door access control on a Norwegian Cruise Line asset grants entry based only on the credential's static 7-byte UID stored on an NTAG212 NFC chip. A UID is a manufacturer serial number sent in the clear on every read and is not intended to be secret or to authenticate the holder. Validating on...

GoCd Cruise Configuration disclosure Detection

GoCd Cruise Configuration is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """GoCd Cruise Configuration is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GoCd Cruise Configuration disclosure Detection'...

Kafka Cruise Control UI Detection

Kafka Cruise Control UI is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Kafka Cruise Control UI is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Kafka Cruise Control UI Detection', 'description':...