News · via oss-security
CVE-2026-110952: Apache Kafka: Broker does not enforce JWT issuer and audience validation for SASL/OAUTHBEARER by default
Posted by Manikumar on Oct 28 Severity: moderate Affected versions: - Apache Kafka 3.1.0 before 4.4.0 Description: A Kafka broker that authenticates clients with SASL/OAUTHBEARER using the bundled…