Do Son Apache Kafka fixes 12 vulnerabilities, including CVE-2026-110985, which skips JWT signature verification and grants full cluster access. Patch now.
Apache Kafka
A Kafka authentication bypass lets attackers replay expired JWTs against 4.0.x brokers. The OAUTHBEARER path checks nbf but not exp. No fix yet.
Apache Kafka faces a critical OAUTHBEARER bypass (CVE-2026-33557) and sensitive logging leaks. Secure your data pipelines—patch to v4.1.2 or v4.2.0 today.
IBM acquires data streaming leader Confluent for $11B to fuel its hybrid cloud and AI strategy. The deal aims to break data silos for next-gen AI workloads. (156 characters)
Apache Kafka fixes CVEs exposing clients to RCE, SSRF, and file read attacks. Update to secure versions and review JAAS settings immediately.
Stay informed about the CVE-2024-31141 vulnerability in Apache Kafka that puts sensitive information at risk.
CVE-2024-27309 could allow unauthorized access to sensitive data during the process of migrating a Kafka cluster from ZooKeeper mode to KRaft mode
Tracked as CVE-2023-25194, Apache Kafka could allow a remote authenticated attacker to execute arbitrary code on the system