CVE-2026-22737 vulnerabilities

Vulnerabilities for packages: kafbat-ui, nacos, apache-nifi-registry, kafbat-ui-fips, apache-activemq, thingsboard, camunda-zeebe, camunda, nacos-docker, apache-activemq-fips...

GHSA-4773-3JFM-QMX3 vulnerabilities

Vulnerabilities for packages: kafbat-ui, nacos, apache-nifi-registry, kafbat-ui-fips, apache-activemq, thingsboard, camunda-zeebe, camunda, nacos-docker, apache-activemq-fips...

GHSA-6HCQ-HMM3-JJ3C vulnerabilities

Vulnerabilities for packages: kafbat-ui, nacos, apache-nifi-registry, kafbat-ui-fips, apache-activemq, thingsboard, camunda-zeebe, camunda, nacos-docker, apache-activemq-fips...

EUVD-2025-17363

Malicious code in bioql PyPI...

CVE-2025-49127

Kafbat UI is a web user interface for managing Apache Kafka clusters. An unsafe deserialization vulnerability in version 1.0.0 allows any unauthenticated user to execute arbitrary code on the server. Version 1.1.0 fixes the issue...

CVE-2025-49127

Kafbat UI is a web user interface for managing Apache Kafka clusters. An unsafe deserialization vulnerability in version 1.0.0 allows any unauthenticated user to execute arbitrary code on the server. Version 1.1.0 fixes the issue...

CVE-2025-49127 Kafbat UI vulnerable to Remote Code Execution by JMX in Metrices Configuration

Kafbat UI is a web user interface for managing Apache Kafka clusters. An unsafe deserialization vulnerability in version 1.0.0 allows any unauthenticated user to execute arbitrary code on the server. Version 1.1.0 fixes the issue...

CVE-2025-49127 Kafbat UI vulnerable to Remote Code Execution by JMX in Metrices Configuration

Kafbat UI is a web user interface for managing Apache Kafka clusters. An unsafe deserialization vulnerability in version 1.0.0 allows any unauthenticated user to execute arbitrary code on the server. Version 1.1.0 fixes the issue...

CVE-2025-49127

CVE-2025-49127 affects Kafbat UI (Apache Kafka UI). An unsafe deserialization vulnerability in version 1.0.0 allows any unauthenticated user to execute arbitrary code on the server. The issue is fixed in version 1.1.0. CVSS: 9.3 (CRITICAL) with NETWORK attack vector, no user interaction required;...

CVE-2025-49127 Kafbat UI vulnerable to Remote Code Execution by JMX in Metrices Configuration

Kafbat UI is a web user interface for managing Apache Kafka clusters. An unsafe deserialization vulnerability in version 1.0.0 allows any unauthenticated user to execute arbitrary code on the server. Version 1.1.0 fixes the issue...

PT-2025-24331 · Apache +1 · Apache Kafka +1

Name of the Vulnerable Software and Affected Versions: Kafbat UI versions prior to 1.1.0 Description: Kafbat UI is a web user interface for managing Apache Kafka clusters. An unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. The issue...