unknown
CVE-2026-110985
Apache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configured
Apache Software Foundation · Apache Kafka
Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.