CVE-2026-100300

Vendor

Apache Software Foundation

Product

Apache ZooKeeper

CVSS v4.0

8.7 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-755

Exposure class

Database

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 35
   CVE NVD 1h ago

   Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write under the /zookeeper/quota…

   Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write under the /zookeeper/quota subtree — unauthenticated on default deployments, where that subtree is…

   CVSS 8.7 Fix available CVE-2026-100300 Apache Software Foundation