Open Zipkin

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Open Zipkin records in CISA KEV

No Open Zipkin vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-56730 CVE-2026-82265 · GHSA-2mv6-7845-668g

Zipkin Unauthenticated Spring Boot Actuator Endpoints Exposure

MEDIUM 64

Zipkin through 3.6.1 exposes Spring Boot Actuator endpoints on the tracing API port without authentication, allowing unauthenticated attackers to access sensitive information.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00449 Published 2026-08-28 No fix listed CWE-306

TI-2025-33538 CVE-2025-53602 · GHSA-794x-8x6x-qpfc

Zipkin through 3.5.1 has a /heapdump endpoint (associated with the use of Spring Boot…

LOW 30

Zipkin through 3.5.1 has a /heapdump endpoint (associated with the use of Spring Boot Actuator), a similar issue to CVE-2025-48927.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00336 Published 2025-07-04 No fix listed CWE-1188

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0