Apache Kafka vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
24 matching records
- Medium6.9Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal.Check if you run itEPSS 0.25%Jun 2, 2026
- Low2.7Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal.Check if you run itEPSS 0.24%Jun 2, 2026
- Medium4.3An improper authorization vulnerability has been identified in Apache Kafka.Check if you run itEPSS 0.29%Jun 2, 2026
- Medium5.3Information exposure vulnerability has been identified in Apache Kafka.Check if you run itEPSS 0.63%Apr 20, 2026
- Critical9.1A possible security vulnerability has been identified in Apache Kafka.Check if you run itEPSS 0.90%Apr 20, 2026
- High8.7A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics.Check if you run itEPSS 0.44%Apr 7, 2026
- High8.1Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations.Check if you run itEPSS 0.39%Feb 21, 2026
- Medium5.9Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations.Check if you run itEPSS 0.20%Feb 20, 2026
- High7.4Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations.Check if you run itEPSS 0.17%Dec 5, 2025
- High7.8Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of serviceCheck if you run itEPSS 0.13%Nov 21, 2025
- High7.5Apache kafka Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 68.78%Jun 10, 2025
- High7.5In CVE-2023-25194, we announced the RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration in Kafka Connect API.Check if you run itEPSS 1.03%Jun 10, 2025
- High8.8A possible security vulnerability has been identified in Apache Kafka.Check if you run itEPSS 1.07%Jun 10, 2025
- High8.9Kafbat UI is a web user interface for managing Apache Kafka clusters.Check if you run itEPSS 0.61%Jun 6, 2025
- Medium5.3Incorrect Implementation of Authentication Algorithm in Apache Kafka's SCRAM implementation.Check if you run itEPSS 0.82%Dec 18, 2024
- Medium6.5Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients.Check if you run itEPSS 1.33%Nov 19, 2024
- UnknownApache kafka_connect Deserialization of Untrusted DataPatch nowKEVEPSS 95.81%May 10, 2024
- High7.4While an Apache Kafka cluster is being migrated from ZooKeeper mode to KRaft mode, in some cases ACLs will not be correctly enforced.Check if you run itEPSS 1.13%Apr 12, 2024
- High7.5A security vulnerability has been identified in Apache Kafka.Check if you run itEPSS 1.48%Sep 20, 2022
- Medium5.9Apache kafka Observable DiscrepancyPatch nowKEVEPSS 6.20%Sep 22, 2021
- High7.5When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a connector is created/up…Check if you run itEPSS 3.91%Jan 14, 2020
- High8.8In Apache Kafka versions between 0.11.0.0 and 2.1.0, it is possible to manually craft a Produce request which bypasses transaction/idempotent ACL validation.Check if you run itEPSS 5.38%Jul 11, 2019
- Medium5.4In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a m…Check if you run itEPSS 4.80%Jul 26, 2018
- Medium6.8In Apache Kafka 0.10.0.0 to 0.10.2.1 and 0.11.0.0 to 0.11.0.1, authenticated Kafka clients may use impersonation via a manually crafted protocol message with SASL/PLAI…Check if you run itEPSS 2.87%Jul 26, 2018
Sort
24 records