Apache Kafka DoS via unbounded allocation on compressed batches (CVE-2026-114349)
Brokers from 0.11.0.0 through the listed 4.3.1 builds allocate an attacker-chosen buffer before validating decompressed data.
58
Vendor
Apache Software Foundation
- Mentions · 7d4
- Mentions · 30d65
- All mentions111
- First seenAug 12, 2026
- Last mentioned2d ago
Timeline
111 articles · newest firstKafka lets unauthorized principals read broker files (CVE-2026-112375)
An authenticated principal with no grants can make a broker return a host file or environment variable.
66
Kafka Connect validate API exposes provider secrets (CVE-2026-116593)
Builds before 4.2.2 and 4.3.2 can reveal configuration-provider values through the connector validation endpoint.
50
Kafka Connect admin REST API auth bypass (CVE-2026-115644)
A separate admin.listeners setup can leave configured REST extensions unapplied, bypassing admin API authentication.
38
CVE-2026-71563: Apache Answer: MCP Answer Retrieval Exposes Content from Non-Public Questions
Apache Answer through 2.0.2 lets global API keys read answers on non-public questions.
38
CVE-2026-68482: Apache Answer: Improper Authorization in Question Invite User Lookup
Apache Answer through 2.0.2 leaks invited-user lists for non-public questions.
28
CVE-2026-67249: Apache Answer: Email Code Purpose Confusion May Allow Account Takeover
Apache Answer email-code confusion through 2.0.2 may allow account takeover.
46
CVE-2026-64945: Apache Answer: Incorrect permission mapping allows users with only the unpin permission to hide/show questions
Apache Answer through 2.0.2 lets unpin-only users hide or show questions.
24
CVE-2026-64944: Apache Answer: Stored XSS via unsanitized HTML in imported question content
Apache Answer through 2.0.2 stores imported question HTML unsanitized, enabling stored cross-site scripting.
32
CVE-2026-64943: Apache Answer: API keys logged in plaintext during authentication
Apache Answer through 2.0.2 logs full API keys in plaintext; 2.0.3 stops the leak.
36
CVE-2026-96806: Apache Airflow Keycloak provider: Keycloak auth manager: logout does not invalidate the session — JWTMiddleware mints an unrevoked replacement token
Apache Airflow Keycloak logout fails to end sessions because middleware reissues an unrevoked JWT.
44
CVE-2026-94135: Apache Airflow SFTP provider: Async SFTP hook disables host-key verification by default
Apache Airflow's async SFTP hook disables SSH host-key checks by default, enabling machine-in-the-middle attacks.
40
CVE-2026-94134: Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default
Apache Airflow SSH and SFTP hooks accept any server key by default, allowing machine-in-the-middle attacks.
42
USN-8931-1: Apache HTTP Server vulnerabilities
Ubuntu patched Apache HTTP Server flaws that may leak data, misroute proxy requests, or allow denial of service or code execution.
62
CVE-2026-103636: Apache DataSketches: datasketches-cpp: Out-of-bounds read in VarOpt union deserialization allows denial of service via a truncated sketch
Apache DataSketches C++ has a low-severity out-of-bounds read in VarOpt union deserialization that can crash on truncated input.
20
CVE-2026-103635: Apache DataSketches: datasketches-cpp: Out-of-bounds read in compact Theta sketch deserialization allows denial of service via a crafted sketch
CVE-2026-103635 lets crafted compact Theta sketches trigger an out-of-bounds read in Apache DataSketches C++.
22
CVE-2026-103412: Apache Camel Karavan: project file name path traversal when committing a project to Git
Apache Camel Karavan before 4.22.1 has high-severity path traversal CVE-2026-103412 via project file names written to Git.
48
FBI Seized Vulnerability Scanning and Spear Phishing Tools Used by China-Linked Hackers
The FBI seized seven domains for Microscan and FishHub tools used by China-linked Flax Typhoon contractor Integrity Technology Group.
78
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
FBI and six countries say China-linked Integrity Technology Group stole emails and shared them via a third-party portal.
79
Re: CVE-2026-59265: Apache OpenOffice: Opening a malicious document can lead to system takeover
A mailing-list reply asks if OpenOffice takeover bug CVE-2026-59265 also affects LibreOffice.
34
CVE-2026-71896: Apache DolphinScheduler: Missing Authorization Checks Allow Unauthorized Disclosure of User Account Information
DolphinScheduler before 3.4.3 lets authenticated users list other accounts without authorization.
55
CVE-2026-71895: Apache DolphinScheduler: Missing Authorization Checks Allow Non-Admin Users to Retrieve Kubernetes Credentials
DolphinScheduler before 3.4.3 lets non-admins retrieve Kubernetes kubeconfig credentials.
66
CVE-2026-71183: Apache DolphinScheduler: Missing Authorization Checks Allow Disclosure of Data Source Information and Passwords
DolphinScheduler before 3.4.3 discloses unauthorized data-source details and passwords.
67
CVE-2026-92414: Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokens
CVE-2026-92414 lets unauthenticated attackers hijack cached Apache Jackrabbit WebDAV sessions and is rated CVSS 9.3.
66
CVE-2026-90466: Apache Impala: Path traversal executes JARs outside trusted paths
Apache Impala 4.5.2 path traversal can load attacker-controlled JARs outside trusted_jar_paths.
55
CVE-2026-105244: Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content
Apache log4net RemoteSyslogAppender strips non-ASCII characters, CVE-2026-105244, CVSS 5.3.
30
CVE-2026-105240: Apache log4net: NUL character truncates OutputDebugStringAppender records
Apache log4net OutputDebugStringAppender stops at NUL bytes, CVE-2026-105240, CVSS 5.3.
28
CVE-2026-105241: Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch
Apache log4net CVE-2026-105241 lets unencodable Unicode discard an entire SmtpPickupDirAppender email batch.
34
CVE-2026-105239: Apache log4net: NUL character truncates EventLogAppender records
Apache log4net CVE-2026-105239 lets a NUL byte truncate Windows Event Log records written by EventLogAppender.
34
CVE-2026-105111: Apache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSS
Apache Commons BCEL Class2HTML before 6.13.0 emits unescaped class strings, enabling stored XSS (CVE-2026-105111).
26
CVE-2026-94114: Apache Commons BCEL: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser
Apache Commons BCEL before 6.13.0 can recurse unboundedly while parsing nested Code or Record attributes (CVE-2026-94114).
44
CVE-2026-104713: Apache Struts: Unbounded request body read in the REST plugin
Apache Struts REST plugin reads request bodies without a size limit, enabling memory-exhaustion denial of service.
58
Apache Thrift 0.25.0: 61 CVEs fixed (combined announcement)
Apache Thrift 0.25.0 fixes 61 vulnerabilities; users should upgrade from all earlier versions.
62
CVE-2026-103885: Apache Directory LDAP API: Denial of service via crafted telephone number values
CVE-2026-103885 lets crafted telephone numbers pin a CPU core in Apache Directory LDAP API before 2.1.9.
38
CVE-2026-103880: Apache Directory LDAP API: Denial of service via excessive bcrypt cost factor in stored passwords
CVE-2026-103880 lets extreme bcrypt cost factors stall Apache Directory LDAP API servers for hours.
32
CVE-2026-103877: Apache Directory LDAP API: Unsafe loading of Java code from LDAP schema elements
Apache Directory LDAP API before 2.1.9 can deserialize Java from a rogue LDAP schema, enabling potential remote code execution.
58
CVE-2026-103552: Apache Directory LDAP API: A unbound client can send a deeply nested search filter that overflows the stack in the server's decoder
Unbound clients can crash Apache Directory LDAP API before 1.2.9 with a deeply nested search filter.
44
CVE-2026-102731: Apache Directory LDAP API: Denial of service via excessive memory allocation in BER decode
A tiny BER response can exhaust memory in Apache Directory LDAP API before 1.2.9, causing denial of service.
42
CVE-2026-59265: Apache OpenOffice: Opening a malicious document can lead to system takeover
Opening a crafted document in Apache OpenOffice 4.1.16 and earlier can execute arbitrary code and take over the system.
68
Apache HTTP Server Flaws Enable Remote Code Execution and Denial-of-Service Attacks
Apache urges HTTP Server 2.4.68 after flaws that can enable code execution, source disclosure, and denial of service.
62
Related CVEs
by mentions- CVE-2026-3448699%7.5EncryptInterceptor Bypass Exposes Cluster Traffic in Apache Tomcat
- FTP PASV address spoofing in Apache mod_proxy_ftp
- CVE-2026-291469%7.5Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration
- CVE-2026-63292<1%7.5Stack buffer overflow in Apache HTTP Server mod_vhost_alias
- WebDAV state-file disclosure in Apache HTTP Server
- Capture-replay auth bypass in Apache HTTP Server mod_auth_digest
- Forced re-auth DoS in Apache HTTP Server mod_auth_digest
- HTTP response smuggling in Apache HTTP Server mod_proxy_uwsgi
- mod_dav lock memory bug crashes Apache HTTP Server
- Wrong CGI handler on redirects in Apache HTTP Server
Appears with
- Apache Software Foundationorganization · 82
- Apache HTTP Serverproduct · 24
- Apache Rollerproduct · 10
- Apache Airflowproduct · 8
- Apache Answerproduct · 6
- Apache APISIXproduct · 5
- Apache Tomcatproduct · 5
- Apache Directory LDAP APIproduct · 5
- Apache Neethiproduct · 4
- Apache log4netproduct · 4
- Apache NiFiproduct · 3
- mod_auth_digestproduct · 3
- Apache DolphinSchedulerproduct · 3
- Apache Strutsproduct · 3
- Apache Sling XSSproduct · 3
- Claudeai model · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.