agentprime: red-hat-streams-for-apache-kafka-3Every new CVE for red-hat-streams-for-apache-kafka-3.https://agentprime.io/CVE-2026-118952: Kroxylicious-authorizer-acl: kroxylicious: acl prefix matching can bypass authorization ruleshttps://agentprime.io/advisories/CVE-2026-118952/https://agentprime.io/advisories/CVE-2026-118952/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 06:04:14 GMTCVECVE-2026-105941: Kroxylicious-kms-provider-azure-key-vault-kms: streams for apache kafka kroxylicious: azure key vault ssrf exfiltrates bearer token via untrusted edek vaultnamehttps://agentprime.io/advisories/CVE-2026-105941/https://agentprime.io/advisories/CVE-2026-105941/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 12:59:00 GMTCVECVE-2026-105949: Cruise-control: streams for apache kafka cruise control: authentication bypass via extra path segment allows unauthenticated access to all admin endpointshttps://agentprime.io/advisories/CVE-2026-105949/https://agentprime.io/advisories/CVE-2026-105949/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 11:30:29 GMTCVECVE-2026-105312: Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalationhttps://agentprime.io/advisories/CVE-2026-105312/https://agentprime.io/advisories/CVE-2026-105312/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 11:30:20 GMTCVEcriticalCVE-2026-105311: Console-operator: streams for apache kafka console: cross-namespace kafkauser secret exfiltration via confused deputyhttps://agentprime.io/advisories/CVE-2026-105311/https://agentprime.io/advisories/CVE-2026-105311/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 11:30:09 GMTCVECVE-2026-96740: Streamshub/console: console-operator: streams for apache kafka console: unfiltered kafka client properties → sa-token exfiltration via config.providershttps://agentprime.io/advisories/CVE-2026-96740/https://agentprime.io/advisories/CVE-2026-96740/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 17:27:44 GMTCVE