Patch 13 Apache Pulsar vulnerabilities and 4 Apache IoTDB flaws now, including critical bugs CVE-2026-105944, CVE-2026-105869, and CVE-2026-59229.
Apache Pulsar
The flaw, tracked as CVE-2024-29834, enables unauthorized users to make changes to sensitive data streams and system access rules.
The CVE-2024-27135 vulnerability also affects the Pulsar Broker under certain configurations, affecting versions from 2.4.0 to 3.2.0
CVE-2022-33684 can be exploited to launch a MITM attack and gain access to the communication channel between endpoints