Apache Kafka Fixes 12 Vulnerabilities, Including a JWT Bypass That Grants Full Cluster Access
29 de Outubro de 2026, 00:33
Apache Kafka fixes 12 vulnerabilities, including CVE-2026-110985, which skips JWT signature verification and grants full cluster access. Patch now.
Related Posts:
- Kerio Connect Vulnerability CVE-2026-112353 Exploited in the Wild to Steal Mailboxes
- FreeSWITCH Vulnerability CVE-2026-116779 Exploited in the Wild to Run Commands
- Details and PoC Exploit Released for Jackson-Databind Flaw CVE-2026-110879 (CVSS 9.8)
The post Apache Kafka Fixes 12 Vulnerabilities, Including a JWT Bypass That Grants Full Cluster Access appeared first on Daily CyberSecurity.