CVE ID :CVE-2026-100300 Published : Nov. 4, 2026, 10:45 a.m. | 19 minutes ago Description :Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write under the /zookeeper/quota subtree — unauthenticated on default deployments, where...

#Sicherheitslücke #DDoS

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-100300 - Apache ZooKeeper: Unauthenticated persistent denial of service via unvalidated quota-node data and paths crashing the transaction-apply thread

VERWANDTEARTIKEL

CVE-2026-115448 - Apache ZooKeeper: Unbounded recursion in snapshot serialization allows a client to render the server unrecoverable

CVE-2026-100252 - Apache ZooKeeper: SASL authorization bypass on the client port through a client-supplied authorization ID

CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code

CVE-2026-120422 - Insecure HTTP configuration retrieval in Sogou Input Method allows arbitrary code execution

CVE-2026-120554 - Import and export users and customers <= 2.5.11 - Authenticated (Custom+) Privilege Escalation via Non-Atomic Cron Settings Save

CVE-2026-110022 - Signed plug-in validation bypass