SC
Product
StreamsHub Console for Apache Kafka®
3
CVEs
0
On KEV
9.9
Max CVSS
3
New 30D
Severity mix
Critical 1High 1Medium 1Low 0
Watch
Add StreamsHub Console for Apache Kafka® to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-105312 | 9.9 | Oct 20 | Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation Affected: 0.2.0 before 0.12.10; 0.13.0 before 0.14.2 |
| CVE-2026-105311 | 7.7 | Oct 20 | Console-operator: streams for apache kafka console: cross-namespace kafkauser secret exfiltration via confused deputy Affected: 0.2.0 before 0.12.10; 0.13.0 before 0.14.2 |
| CVE-2026-96740 | 6.5 | Sep 28 | Streamshub/console: console-operator: streams for apache kafka console: unfiltered kafka client properties → sa-token exfiltration via config.providers Affected: 0.2.1 before 0.12.9; 0.13.0 before 0.14.1 |
Showing 3