共收录 63078 条相关情报。
← 返回所有主题CVE-2026-115644
Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners i
CVE-2026-114349
When a broker decodes a compressed record batch, the per-record decoder reads a declared body size from the decompressed
CVE-2026-112375
An authenticated Kafka principal with no authorization grants (not even ALTER_CONFIGS) can make a broker read a file or
CVE-2026-111551
Several Kafka deserialization paths read a size or count field from input data and use it directly to allocate an array,
CVE-2026-111496
Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next() computed the next punctua
CVE-2026-111115
Apache Kafka's code-generated readers for flexible protocol versions read a tagged-field count declared by the sender an
CVE-2026-111108
Apache Kafka's code-generated protocol readers pre-size an array's collection from the element count declared by the sen
CVE-2026-111073
The broker-side PushTelemetry API (KIP-714) validates only the compressed size of a client's metrics payload against tel
CVE-2026-110985
A Kafka broker using SASL/OAUTHBEARER with the default validator (sasl.oauthbearer.jwt.validator.class=DefaultJwtValidat
CVE-2026-110952
A Kafka broker that authenticates clients with SASL/OAUTHBEARER using the bundled JWKS-backed validator always verifies
CVE-2026-106079
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessMan
CVE-2026-103506
An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required
CVE-2026-103411
An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker wit
CVE-2026-103410
An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unau
CVE-2026-103409
A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthen
CVE-2026-103408
A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthentica
CVE-2026-103407
An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Sessi
CVE-2026-103406
An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Junipe
CVE-2026-103405
An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in t
CVE-2026-103404
An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Sma