Apache Zookeeper vulnerabilities

• apache zookeeper Apache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProvider CVE-2026-84501 Fix available 5.3 MediumSeptember 16, 2026
• apache zookeeper Apache ZooKeeper: Audit log injection via unsanitized output from multiple sources CVE-2026-84439 Fix available 5.3 MediumSeptember 16, 2026
• apache zookeeper Apache ZooKeeper: Missing ACL check on deleteContainer opcode allows unauthorized deletion of any empty persistent/container znode CVE-2026-79993 Fix available 7.5 HighSeptember 16, 2026
• apache zookeeper Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS mode CVE-2026-59969 Fix available 7.5 HighSeptember 16, 2026
• apache zookeeper Apache ZooKeeper: Information disclosure via SetWatches reconnect replay CVE-2026-59739 Fix available 7.5 HighSeptember 16, 2026
• apache zookeeper, red hat amq broker 7.12.7, amq broker 7.13.5 +14 more +16 more Apache ZooKeeper: Sensitive information disclosure in client configuration handling CVE-2026-24308 Fix available 7.5 HighMarch 7, 2026
• apache zookeeper, red hat amq broker 7.12.7, amq broker 7.13.5 +14 more +16 more Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager CVE-2026-24281 Fix available 7.4 HighMarch 7, 2026
• apache zookeeper Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands CVE-2025-58457 Fix available 4.3 MediumSeptember 24, 2025
• apache zookeeper Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server CVE-2024-51504 Fix available 9.1 CriticalNovember 7, 2024
• apache zookeeper Apache ZooKeeper: Information disclosure in persistent watcher handling CVE-2024-23944 Fix available 5.3 MediumMarch 15, 2024
• apache zookeeper, debian linux +1 more Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication CVE-2023-44981 Fix available 9.1 CriticalOctober 11, 2023
• netty io.netty:netty-codec-http2, netty, apache kudu +6 more +8 more Possible request smuggling in HTTP/2 due missing validation CVE-2021-21295 Fix available EPSS 18.9% 5.9 MediumMarch 9, 2021
• apache zookeeper, activemq, drill +7 more +9 more Access control bypass in Apache ZooKeeper CVE-2019-0201 Fix available 5.9 MediumMay 23, 2019
• apache zookeeper, debian linux, oracle goldengate stream analytics +2 more Missing Authorization in Apache ZooKeeper CVE-2018-8012 Fix available 7.5 HighMay 21, 2018
• apache zookeeper, debian linux +1 more Uncontrolled Resource Consumption in Apache ZooKeeper CVE-2017-5637 Public exploitFix available EPSS 73.1% 7.5 HighJune 1, 2017
• apache zookeeper Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when... CVE-2016-5017 Fix available 8.1 HighSeptember 18, 2016