Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Apache Kafka — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Apache Kafka, with AI-generated Chinese analysis, references, and POCs.

Vendor: Apache Software Foundation

CVE IDTitleCVSSSeverityPublished
CVE-2026-41115 Apache Kafka: Improper Authorization in CONSUMER_GROUP_DESCRIBE API CWE-285--2026-06-02
CVE-2026-33557 Apache Kafka: Missing JWT token validation in OAUTHBEARER authentication CWE-1285 9.1AICriticalAI2026-04-20
CVE-2026-33558 Apache Kafka, Apache Kafka Clients: Information Exposure Through Network Client Log Output CWE-533 5.9AIMediumAI2026-04-20
CVE-2025-27819 Apache Kafka: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration CWE-502 8.1 -2025-06-10
CVE-2025-27818 Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration CWE-502 8.1 -2025-06-10
CVE-2024-56128 Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption CWE-303 7.5 -2024-12-18
CVE-2024-27309 Apache Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode CWE-863 4.4 -2024-04-12
CVE-2022-34917 Unauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers CWE-789 7.5 -2022-09-20
CVE-2021-38153 Timing Attack Vulnerability for Apache Kafka Connect and Clients CWE-203 5.9 -2021-09-22
CVE-2017-12610 Apache Kafka 授权问题漏洞 6.8 -2018-07-26
CVE-2018-1288 Apache Kafka 信息泄露漏洞 5.4 -2018-07-26

All 11 known CVE vulnerabilities affecting Apache Kafka with full Chinese analysis, references, and POCs where available.