CVE record · 1 source
CVE-2026-111681
CVSS 8.8EFAK through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to manage accounts because the…
- Vendor
- Apache Software Foundation
- Product
- Kafka
- CVSS
- 8.8
- Exposure class
- Database
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
EFAK through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to manage accounts because the…
EFAK through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to manage accounts because the /api/users endpoints lack administrator role checks. Attackers can send POST, PUT, or…