CVE-2026-55225High 8.0Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`0.3%
CVE-2026-55226Medium 5.4Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator0.2%
CVE-2026-27134High 8.1Strimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autentication0.4%
CVE-2026-27133Medium 5.9Strimzi All CAs from CA chain will be trusted in Kafka Connect and Kafka MirrorMaker 2 target clusters0.2%
CVE-2025-66623High 7.4Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands0.2%