CVE-2025-66623High· 7.4▾ TwilightStrimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. From 0.47.0 and prior to 0.49.1, in some situations, Strimzi creates an incorrect Kubernetes Role which grants the Apa…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. From 0.47.0 and prior to 0.49.1, in some situations, Strimzi creates an incorrect Kubernetes Role which grants the Apache Kafka Connect and Apache Kafka MirrorMaker 2 operands the GET access to all Kubernetes Secrets that exist in the given Kubernetes namespace. The issue is fixed in Strimzi 0.49.1.
strimzi < 0.49.1Upgrade past the affected range:
strimzi 0.49.1Connected by shared product, vendor, weakness, or advisory.
CVE-2026-33217High· 7.1NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system
CVE-2026-58254Medium· 6.5NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system
CVE-2026-58214Medium· 4.3NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system
CVE-2026-58209Medium· 4.3NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system
CVE-2024-21626High· 8.6runc is a CLI tool for spawning and running containers on Linux according to the OCI specification
CVE-2022-0577Medium· 6.5Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy