AK
Product
Apache Kafka
by Apache Software Foundation · last CVE Jun 2, 2026
4
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 3Low 0
Watch

Add Apache Kafka to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33558
5.3
1%
Apr 20
Apache Kafka, Apache Kafka Clients: Information Exposure Through Network Client Log Output
Affected: 0.11.0 through 3.9.1; 4.0.0
CVE-2024-56128
5.3
1%
Dec 18
Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption
Affected: 0.10.2.0 before 3.7.2; 3.8.0
CVE-2026-41115
4.3
0%
Jun 2
Apache Kafka: Improper Authorization in CONSUMER_GROUP_DESCRIBE API
Affected: 4.0.0 through 4.3.0
Showing 3