VDB

CVE-2026-24281

CVE-2026-24281 PUBLISHED CVSS 7.400000095367432 HIGH

Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager

EPSS 0.63% · 48.5th percentile

Risk Scores

CVSS 3.1
7.400000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.63%
48.5th percentile

Affected Products

VendorProductVersions
Bitnamizookeeper3.8.0, 3.9.0, 3.8.0

Timeline

  • Mar 7, 2026 CVE Published
  • Mar 7, 2026 EPSS Score
  • Mar 7, 2026 PoC Published
  • Mar 7, 2026 PoC Published
  • Mar 7, 2026 PoC Published
  • Mar 7, 2026 PoC Published
  • Mar 7, 2026 PoC Published
  • Mar 7, 2026 PoC Published
  • Mar 9, 2026 PoC Published
  • Mar 9, 2026 EPSS Score
  • Mar 10, 2026 CVE Updated
  • Mar 11, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›