confluent vulnerabilities

Products

• ansible 1
• confluent-kafka 1
• cp-ansible 1

Latest confluent CVEs

Newest publication first

1. CVE-2026-15911 Confluent Kafka Python Improper TLS Certificate Validation

   Published 2026-10-01

   High·CVSS 7.4 EPSS 0.30%

   Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation.

2. CVE-2021-33924 Confluent Ansible (cp-ansible) version 5.5.0, 5.5.1, 5.5.2 and 6.0.0 is vulnerable to Incorrect Access Control via its auxiliary component that allows remote attackers to access sensitive information.

   Published 2021-09-29

   Critical·CVSS 9.8 EPSS 1.6%

   Confluent Ansible (cp-ansible) version 5.5.0, 5.5.1, 5.5.2 and 6.0.0 is vulnerable to Incorrect Access Control via its auxiliary component that allows remote attackers to access sensitive information.

3. CVE-2021-33923 Insecure permissions in Confluent Ansible (cp-ansible) 5.5.0, 5.5.1, 5.5.2 and 6.0.0 allows local attackers to access some sensitive information (private keys, state database).

   Published 2021-09-29

   Medium·CVSS 5.5 EPSS 0.30%

   Insecure permissions in Confluent Ansible (cp-ansible) 5.5.0, 5.5.1, 5.5.2 and 6.0.0 allows local attackers to access some sensitive information (private keys, state database).

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.