Apache Software Foundation Apache ZooKeeper

• CVE-2026-100302 High 7.1 Apache ZooKeeper: Denial of service through unbounded memory allocation in multiRead request handling 0.5%
• CVE-2026-115448 High 8.7 Apache ZooKeeper: Unbounded recursion in snapshot serialization allows a client to render the server unrecoverable 0.6%
• CVE-2026-100300 High 8.7 Apache ZooKeeper: Unauthenticated persistent denial of service via unvalidated quota-node data and paths crashing the transaction-apply thread 0.5%
• CVE-2026-100252 High 8.6 Apache ZooKeeper: SASL authorization bypass on the client port through a client-supplied authorization ID 0.5%
• CVE-2026-100235 Medium 6.0 Apache ZooKeeper: ACL enforcement bypass allows unauthorized operations to commit after an ACL revocation 0.3%
• CVE-2026-84501 Medium 5.3 Apache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProvider 0.7%
• CVE-2026-84439 Medium 5.3 Apache ZooKeeper: Audit log injection via unsanitized output from multiple sources 0.7%
• CVE-2026-79993 High 7.5 Apache ZooKeeper: Missing ACL check on deleteContainer opcode allows unauthorized deletion of any empty persistent/container znode 0.6%
• CVE-2026-59969 High 7.5 Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS mode 0.3%
• CVE-2026-59739 High 7.5 Apache ZooKeeper: Information disclosure via SetWatches reconnect replay 0.6%
• CVE-2026-24308 Medium 6.5 Apache ZooKeeper: Sensitive information disclosure in client configuration handling 1.3%
• CVE-2026-24281 Medium 5.9 Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager 0.7%
• CVE-2025-58457 Medium 4.3 Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands 0.3%
• CVE-2024-51504 Critical 9.1 Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server 0.9%
• CVE-2024-23944 Medium 5.3 Apache ZooKeeper: Information disclosure in persistent watcher handling 0.2%
• CVE-2023-44981 Critical 9.1 Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication 2.2%