SUSE CVE-2026-15911

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

CVE-2026-15911

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

CVE-2026-15911

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

EUVD-2026-91008

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

CVE-2026-15911 Confluent Kafka Python Improper TLS Certificate Validation

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

CVE-2026-15911

The Confluent Kafka Python client contains a vulnerability in its HashiCorp Vault KMS integration due to a failure to properly validate Transport Layer Security (TLS) certificates by default. A remote attacker capable of intercepting network traffic could exploit this flaw to intercept and decryp...

CVE-2026-15911 Confluent Kafka Python Improper TLS Certificate Validation

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

PT-2026-103973

Name of the Vulnerable Software and Affected Versions confluent-kafka-python versions prior to 2.15.1 Description Improper TLS certificate validation in the HashiCorp Vault KMS integration may allow a remote attacker to obtain sensitive information. TLS Transport Layer Security is a cryptographic...

CVE-2026-15911: Improper Certificate Validation

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses kafka_python-2.3.0-py2.py3-none-any.wh which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor Component uses kafkapython-2.3.0-py2.py3-none-any.wh which is vulnerable to CVE-2026-10142, CVE-2026-10143. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-10142 DESCRIPTION: kafka-python prior to...

Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - IoT Component uses...

Linux Distros Unpatched Vulnerability : CVE-2026-10143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker ...

CVE-2026-10142

A flaw was found in kafka-python. A malicious broker or a machine-in-the-middle attacker can exploit a denial-of-service vulnerability in the protocol parser. By sending a specially crafted 4-byte frame length value without proper bounds validation, an attacker can trigger excessive memory...

SUSE CVE-2026-10142

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker to exhaust memory or hang connections by sending a crafted 4-byte frame length value without bounds validation. Attackers can send a...

SUSE CVE-2026-10143

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the client event loop by supplying an excessively large iteration count. In scram.py, ScramClient.processserverfirstmessage...

Linux Distros Unpatched Vulnerability : CVE-2026-10142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker t...

ctec-utils (>=0.3.8, <=1.3.0), dataverk (0.2.13) +14 more potentially affected by CVE-2026-10143 via kafka-python (1.4.6)

kafka-python PYPI version 1.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - ctec-utils =0.3.8, =1.0.0, =13.0.0, =11.1.0, =1.0.1, =1.2.5, =1.3.0, =4.3.1, =0.2.1, =0.1.2a47, =0.0.1, =4.1.0, =4.6.0 -...

ag-kafka-utils (>=0.1.0, <=0.1.2), ai-flow (0.3.1) +114 more potentially affected by CVE-2026-10143 via kafka-python (>=2.0.0, <=2.3.1)

kafka-python PYPI version =2.0.0, =0.1.0, =2022.9.19, =25.8.14, =3.2.0, =1.1.87, =2.8.0a0, =0.1.12, =0.1.4, =0.0.9, =0.0.3, =0.3.64, =0.3.124 and more Source cves: CVE-2026-10143 Source advisory: OSV:GHSA-2JCM-HQ8R-84WX...

prometheus-kafka-consumer-group-exporter (0.3.1) potentially affected by CVE-2026-10142 via kafka-python (1.3.5)

kafka-python PYPI version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - prometheus-kafka-consumer-group-exporter 0.3.1 Source cves: CVE-2026-10142 Source advisory: OSV:GHSA-M3PX-Q5GJ-J9X7...

beaver (36.3.1), data-pipeline (>=0.9.5, <=0.9.12) +1 more potentially affected by CVE-2026-10143 via kafka-python (0.9.5)

kafka-python PYPI version 0.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - beaver 36.3.1 - data-pipeline =0.9.5, =0.0.7, =1.3.0 Source cves: CVE-2026-10143 Source advisory: OSV:GHSA-2JCM-HQ8R-84WX...