agentprime: apache-software-foundation-apache-kafkaEvery new CVE for apache-software-foundation-apache-kafka.https://agentprime.io/CVE-2026-114349: Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batcheshttps://agentprime.io/advisories/CVE-2026-114349/https://agentprime.io/advisories/CVE-2026-114349/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:46:54 GMTCVECVE-2026-112375: Apache Kafka: Unauthorized principal can read arbitrary broker files via IncrementalAlterConfigshttps://agentprime.io/advisories/CVE-2026-112375/https://agentprime.io/advisories/CVE-2026-112375/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:46:38 GMTCVECVE-2026-116593: Apache Kafka: Kafka Connect configuration provider values exposed via validation REST API endpointhttps://agentprime.io/advisories/CVE-2026-116593/https://agentprime.io/advisories/CVE-2026-116593/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:46:21 GMTCVECVE-2026-115644: Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST Extensionshttps://agentprime.io/advisories/CVE-2026-115644/https://agentprime.io/advisories/CVE-2026-115644/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:45:36 GMTCVECVE-2026-111551: Apache Kafka: Denial of service in Kafka Streams and client deserializers via unbounded memory allocationhttps://agentprime.io/advisories/CVE-2026-111551/https://agentprime.io/advisories/CVE-2026-111551/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:45:25 GMTCVECVE-2026-111496: Apache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuationhttps://agentprime.io/advisories/CVE-2026-111496/https://agentprime.io/advisories/CVE-2026-111496/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:45:08 GMTCVEcriticalCVE-2026-111115: Apache Kafka: Broker OutOfMemoryError via tagged-field allocation amplification in flexible protocol request parsinghttps://agentprime.io/advisories/CVE-2026-111115/https://agentprime.io/advisories/CVE-2026-111115/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:44:53 GMTCVEcriticalCVE-2026-111108: Apache Kafka: Broker OutOfMemoryError via array allocation amplification in code-generated protocol readershttps://agentprime.io/advisories/CVE-2026-111108/https://agentprime.io/advisories/CVE-2026-111108/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:38:08 GMTCVEcriticalCVE-2026-111073: Apache Kafka: PushTelemetry (KIP-714) metrics payloads are decompressed without a size limit, allowing a broker out-of-memory denial of servicehttps://agentprime.io/advisories/CVE-2026-111073/https://agentprime.io/advisories/CVE-2026-111073/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:37:58 GMTCVECVE-2026-110985: Apache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configuredhttps://agentprime.io/advisories/CVE-2026-110985/https://agentprime.io/advisories/CVE-2026-110985/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:37:45 GMTCVEcriticalCVE-2026-110952: Apache Kafka: Broker does not enforce JWT issuer and audience validation for SASL/OAUTHBEARER by defaulthttps://agentprime.io/advisories/CVE-2026-110952/https://agentprime.io/advisories/CVE-2026-110952/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:37:34 GMTCVECVE-2026-83525: Apache Kafka: Incorrect boolean operator in FetchSnapshot RPC handler allows authenticated network clients to crash the KRaft controller via a malformed request.https://agentprime.io/advisories/CVE-2026-83525/https://agentprime.io/advisories/CVE-2026-83525/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:37:19 GMTCVECVE-2026-41115: Apache Kafka: Improper Authorization in CONSUMER_GROUP_DESCRIBE APIhttps://agentprime.io/advisories/CVE-2026-41115/https://agentprime.io/advisories/CVE-2026-41115/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 08:56:43 GMTCVE