strimzi güvenlik açıkları (CVE)

strimzi için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

5 sonuç
8.0Yüksek
CVE-2026-55225

Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`

strimzi strimzi-kafka-operator; Red Hat Streams for Apache Kafka 3.2.1; Red Hat streams for Apache Kafka 2

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, an attacker who can create a Kafka custom resource can set Kafka.spec.entityOperator watchedNamespace to a tar…

8.1Yüksek
CVE-2026-27134

Strimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autentication

strimzi strimzi-kafka-operator; Red Hat streams for Apache Kafka 2; Red Hat streams for Apache Kafka 3

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In versions 0.49.0 through 0.50.0, when using a custom Cluster or Clients CA with a multistage CA chain consisting of multiple CAs, Strimzi…