Package · Maven

org.apache.kafka:kafka_2.9.2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.5

CVE-2025-27819

Apache Kafka: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration

In CVE-2023-25194, we announced the RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration in Kafka Connect API. But not only Kafka Connect API is vulnerable to this attack, the Apache Kafka brokers also have this vulnerability. To exploit t…

Apache Software Foundation Apache Kafka org.apache.kafka:kafka_2.12 org.apache.kafka:kafka_2.11 Maven

Jun 10, 2025