provectus ui vulnerabilities

Latest provectus ui CVEs

Newest publication first

1. CVE-2026-5562 provectus kafka-ui Endpoint testexecutions validateAccess code injection

   Published 2026-04-05

   Medium·CVSS 6.9 EPSS 2.6%

   A vulnerability was identified in provectus kafka-ui up to 0.7.2. This impacts the function validateAccess of the file /api/smartfilters/testexecutions of the component Endpoint. The manipulation leads to code injection. The attack can be initiated remotely. The exploit is public...

2. CVE-2024-32030 Remote code execution via JNDI resolution in JMX metrics collection in Kafka UI

   Published 2024-06-19

   High·CVSS 8.1 EPSS 51.1%

   Kafka UI is an Open-Source Web UI for Apache Kafka Management. Kafka UI API allows users to connect to different Kafka brokers by specifying their network address and port. As a separate feature, it also provides the ability to monitor the performance of Kafka brokers by connecti...

3. CVE-2023-52251 An issue discovered in provectus kafka-ui 0.4.0 through 0.7.2 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/{topic}/messages. No fixed release is....

   Published 2024-01-25

   High·CVSS 8.8 EPSS 86.8% Framework module

   An issue discovered in provectus kafka-ui 0.4.0 through 0.7.2 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/{topic}/messages. No fixed release is available; the project has had no commit since 2024-04-08.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.