Do Son Apache Kafka fixes 12 vulnerabilities, including CVE-2026-110985, which skips JWT signature verification and grants full cluster access. Patch now.
Kafka Connect
Apache Kafka fixes CVEs exposing clients to RCE, SSRF, and file read attacks. Update to secure versions and review JAAS settings immediately.