NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

ZooKeeper

Search everything

Mentions · 7d5
Mentions · 30d5
All mentions5
First seenNov 3, 2026
Last mentioned9h ago

Timeline

5 articles · newest first

Apache ZooKeeper vulnerable to unbounded recursion in snapshot serialization (CVE-2026-115448)

A client can cause the server to become unrecoverable by creating znodes due to no depth limit in recursion.

oss-securityNov 3, 20:07 UTC · 9h agoVulnerability 4 sourcesCVE-2026-115448

80

Apache ZooKeeper vulnerable to denial of service in multiRead request handling (CVE-2026-100302)

A remote attacker can crash the server with a single small request by overwhelming memory allocation.

oss-securityNov 3, 20:05 UTC · 9h agoVulnerability 4 sourcesCVE-2026-100302

70

Apache ZooKeeper quota subsystem allows unauthenticated DoS (CVE-2026-100300)

Affects ZooKeeper 3.8.0-3.9.6; unauthenticated DoS by writing to /zookeeper/quota subtree

oss-securityNov 3, 20:03 UTC · 9h agoVulnerability 4 sourcesCVE-2026-100300

30

Apache ZooKeeper SASL authorization bypass on client port (CVE-2026-100252)

Affects 3.8.0-3.9.6; client-supplied authzid bypasses SASL checks

oss-securityNov 3, 20:01 UTC · 9h agoVulnerability 4 sourcesCVE-2026-100252

30

Apache ZooKeeper ACL enforcement bypass allows unauthorized operations

TOCTOU race condition in setACL request handling allows unauthorized operations to commit after an ACL revocation in versions 3.9.0 through 3.9.6 and 3.8.0 through 3.8.7.

oss-securityNov 3, 19:59 UTC · 10h agoVulnerabilityCVE-2026-100235

50

Related CVEs

by mentions

CVE-2026-100300—
published —
CVE-2026-100252—
published —
CVE-2026-100235—
published —
CVE-2026-100302—
published —
CVE-2026-115448—
published —

Appears with

apachevendor · 5

Entities are extracted by the model from each article. First seen Nov 3, 2026, last mentioned 9h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.