PT-2026-103973

CVE-2026-15911

Published

2026-10-01

Updated

2026-10-06

Description by

CVSS 3.1

7.4

High

MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions confluent-kafka-python versions prior to 2.15.1

Description Improper TLS certificate validation in the HashiCorp Vault KMS integration may allow a remote attacker to obtain sensitive information. TLS (Transport Layer Security) is a cryptographic protocol designed to provide communications security over a computer network.

Recommendations Update to version 2.15.1.

Exploitability

Fix

Impacts

Researchers

Rahul Karne

Vendors

Affected products

Weakness enumeration

CWE-295: Improper Certificate Validation

Related identifiers

CVE-2026-15911