Vulnerabilities

TI-2026-13330 CVE-2026-15911 · GHSA-r743-crv8-m3qr

Confluent Kafka Python Improper TLS Certificate Validation

LOW 34

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00297 Published 2026-10-01 No fix listed CWE-295

TI-2021-13224 CVE-2021-33924 · GHSA-vv3v-q4rf-6jcp

Confluent Ansible (cp-ansible) version 5.5.0, 5.5.1, 5.5.2 and 6.0.0 is vulnerable to…

MEDIUM 45

Confluent Ansible (cp-ansible) version 5.5.0, 5.5.1, 5.5.2 and 6.0.0 is vulnerable to Incorrect Access Control via its auxiliary component that allows remote attackers to access sensitive information.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01629 Published 2021-09-29 No fix listed CWE-862

TI-2021-13223 CVE-2021-33923 · GHSA-3pr9-2fjg-j2x8

Insecure permissions in Confluent Ansible (cp-ansible) 5.5.0, 5.5.1, 5.5.2 and 6.0.0…

LOW 25

Insecure permissions in Confluent Ansible (cp-ansible) 5.5.0, 5.5.1, 5.5.2 and 6.0.0 allows local attackers to access some sensitive information (private keys, state database).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00296 Published 2021-09-29 No fix listed CWE-276

Vulnerabilities

Filters

Confluent Kafka Python Improper TLS Certificate Validation

Confluent Ansible (cp-ansible) version 5.5.0, 5.5.1, 5.5.2 and 6.0.0 is vulnerable to…

Insecure permissions in Confluent Ansible (cp-ansible) 5.5.0, 5.5.1, 5.5.2 and 6.0.0…