CVE-2026-100302

Vendor

Apache Software Foundation

Product

Apache ZooKeeper

CVSS v4.0

7.1 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-770

Exposure class

Database

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 35
   CVE NVD 1h ago

   Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the…

   Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server (denial of service) with a single small request. The multiRead handler places…

   CVSS 7.1 Fix available CVE-2026-100302 Apache Software Foundation