Apache Kafka security vulnerabilities
Open-source infrastructure. Public CVE monitoring for Apache Kafka. Vendor security advisories are linked on this page.
Built for Operators of this product.
24 public records · 0 security-fix timeline events. 0 published in the last 7 days. 19 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 0
- High 0
- Medium 0
- Low 0
2026-08-050 issues2026-11-02
Known exploited
View all known exploitedRecently published
Browse catalog- Medium6.9Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal.Check if you run itEPSS 0.25%Jun 2, 2026
- Medium4.3An improper authorization vulnerability has been identified in Apache Kafka.Check if you run itEPSS 0.29%Jun 2, 2026
- Medium5.3Information exposure vulnerability has been identified in Apache Kafka.Check if you run itEPSS 0.63%Apr 20, 2026
- Critical9.1A possible security vulnerability has been identified in Apache Kafka.Check if you run itEPSS 0.90%Apr 20, 2026
- High8.7A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics.Check if you run itEPSS 0.44%Apr 7, 2026
- High8.1Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations.Check if you run itEPSS 0.39%Feb 21, 2026
- Medium5.9Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations.Check if you run itEPSS 0.20%Feb 20, 2026
- High7.4Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations.Check if you run itEPSS 0.17%Dec 5, 2025
- High7.8Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of serviceCheck if you run itEPSS 0.13%Nov 21, 2025
- High7.5Apache kafka Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 68.78%Jun 10, 2025