Apache Kafka Connect

Search everything

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 28, 2026
Last mentioned2d ago

Timeline

2 articles · newest first

Kafka Connect validate API exposes provider secrets (CVE-2026-116593)

Builds before 4.2.2 and 4.3.2 can reveal configuration-provider values through the connector validation endpoint.

oss-securityOct 28, 17:40 UTC · 2d agoVulnerability 2 sourcesCVE-2026-116593

Kafka Connect admin REST API auth bypass (CVE-2026-115644)

A separate admin.listeners setup can leave configured REST extensions unapplied, bypassing admin API authentication.

oss-securityOct 28, 17:38 UTC · 2d agoVulnerability 2 sourcesCVE-2026-115644

Related CVEs

by mentions

CVE-2026-116593—
Sensitive config leak via Kafka Connect validate API
published 2d agoApache Kafka Connect
CVE-2026-115644—
Auth bypass in Kafka Connect admin REST with split admin.listeners
published 2d agoApache Kafka Connect

Appears with

Apache Software Foundationvendor · 2

Entities are extracted by the model from each article. First seen Oct 28, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.