News · via oss-security
CVE-2026-83525: Apache Kafka: Incorrect boolean operator in FetchSnapshot RPC handler allows authenticated network clients to crash the KRaft controller via a malformed request.
Posted by Manikumar on Oct 28 Severity: low Affected versions: - Apache Kafka 2.8.0 before 4.2.2 - Apache Kafka 4.3.0 before 4.3.2 Description: Incorrect operator (CWE-480) in the FetchSnapshot RPC…