SF
Product
streams for Apache Kafka 2
by Red Hat · last CVE Oct 20, 2026
13
CVEs
0
On KEV
9.9
Max CVSS
4
New 30D
Severity mix
Critical 3High 9Medium 1Low 0
Watch

Add streams for Apache Kafka 2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-105312
9.9
0%
Oct 20
Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation
Affected: All versions, or not specified
CVE-2026-42264
9.1
1%
May 8
Axios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijacking
Affected: All versions, or not specified
CVE-2026-2332
9.1
1%
Apr 14
HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
Affected: All versions, or not specified
Showing 3