Apache Software Foundation Apache ZooKeeper vulnerabilities and fixes
Exploited and high-severity Apache Software Foundation Apache ZooKeeper vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 8.7CVE-2026-115448Apache ZooKeeper: Unbounded recursion in snapshot serialization allows a client to render the server unrecoverableVerify fixApache Software Foundation Apache ZooKeeper
1 min read - 8.6CVE-2026-100252Apache ZooKeeper: SASL authorization bypass on the client port through a client-supplied authorization IDVerify fixApache Software Foundation Apache ZooKeeper
1 min read - 8.7CVE-2026-100300Apache ZooKeeper: Unauthenticated persistent denial of service via unvalidated quota-node data and paths crashing the transaction-apply threadVerify fixApache Software Foundation Apache ZooKeeper
1 min read - 7.1CVE-2026-100302Apache ZooKeeper: Denial of service through unbounded memory allocation in multiRead request handlingVerify fixApache Software Foundation Apache ZooKeeper
1 min read