redpanda-data

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

redpanda-data records in CISA KEV

No redpanda-data vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-56731 CVE-2026-82266 · GHSA-qp5m-mrqw-6pxr

Redpanda Admin API Unauthenticated Superuser Access via Default Configuration

MEDIUM 49

Redpanda through 26.2.2 binds the Admin API to 0.0.0.0:9644 with admin_api_require_auth defaulting to false, treating unauthenticated requests as superusers.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00621 Published 2026-08-28 No fix listed CWE-306

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0