Apache Software Foundation Zookeeper vulnerabilities

• apache software foundation zookeeper Apache ZooKeeper: Denial of service through unbounded memory allocation in multiRead request handling CVE-2026-100302 7.1 HighNovember 4, 2026
• apache software foundation zookeeper Apache ZooKeeper: Unbounded recursion in snapshot serialization allows a client to render the server unrecoverable CVE-2026-115448 8.7 HighNovember 4, 2026
• apache software foundation zookeeper Apache ZooKeeper: Unauthenticated persistent denial of service via unvalidated quota-node data and paths crashing the transaction-apply thread CVE-2026-100300 8.7 HighNovember 4, 2026
• apache software foundation zookeeper Apache ZooKeeper: SASL authorization bypass on the client port through a client-supplied authorization ID CVE-2026-100252 8.6 HighNovember 4, 2026
• apache software foundation zookeeper Apache ZooKeeper: ACL enforcement bypass allows unauthorized operations to commit after an ACL revocation CVE-2026-100235 6.0 MediumNovember 4, 2026
• apache zookeeper Apache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProvider CVE-2026-84501 Fix available 5.3 MediumSeptember 16, 2026
• apache zookeeper Apache ZooKeeper: Audit log injection via unsanitized output from multiple sources CVE-2026-84439 Fix available 5.3 MediumSeptember 16, 2026
• apache zookeeper Apache ZooKeeper: Missing ACL check on deleteContainer opcode allows unauthorized deletion of any empty persistent/container znode CVE-2026-79993 Fix available 7.5 HighSeptember 16, 2026
• apache zookeeper Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS mode CVE-2026-59969 Fix available 7.5 HighSeptember 16, 2026
• apache zookeeper Apache ZooKeeper: Information disclosure via SetWatches reconnect replay CVE-2026-59739 Fix available 7.5 HighSeptember 16, 2026
• apache zookeeper, red hat amq broker 7.12.7, amq broker 7.13.5 +14 more +16 more Apache ZooKeeper: Sensitive information disclosure in client configuration handling CVE-2026-24308 Fix available 7.5 HighMarch 7, 2026
• apache zookeeper, red hat amq broker 7.12.7, amq broker 7.13.5 +14 more +16 more Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager CVE-2026-24281 Fix available 7.4 HighMarch 7, 2026
• apache zookeeper Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands CVE-2025-58457 Fix available 4.3 MediumSeptember 24, 2025
• apache zookeeper Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server CVE-2024-51504 Fix available 9.1 CriticalNovember 7, 2024
• apache zookeeper Apache ZooKeeper: Information disclosure in persistent watcher handling CVE-2024-23944 Fix available 5.3 MediumMarch 15, 2024
• apache zookeeper, debian linux +1 more Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication CVE-2023-44981 Fix available 9.1 CriticalOctober 11, 2023
• apache zookeeper, activemq, drill +7 more +9 more Access control bypass in Apache ZooKeeper CVE-2019-0201 Fix available 5.9 MediumMay 23, 2019
• apache zookeeper, debian linux, oracle goldengate stream analytics +2 more Missing Authorization in Apache ZooKeeper CVE-2018-8012 Fix available 7.5 HighMay 21, 2018
• apache zookeeper, debian linux +1 more Uncontrolled Resource Consumption in Apache ZooKeeper CVE-2017-5637 Public exploitFix available EPSS 73.1% 7.5 HighJune 1, 2017