CVE-2026-15911 — Confluent Kafka Python Improper TLS Certificate Validation

CVE-2026-15911

Confluent Kafka Python Improper TLS Certificate Validation PUBLISHED

Description (CNA)

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation.

Affected (CNA)

Vendor / product	Versions
confluent / confluent-kafka	affected 0 through 2.14.2

CWE

CWE-295

References

https://support.confluent.io/hc/en-us/articles/54133146724244-CONFSA-2026-22-CVE-2026-15911-Confluent-Kafka-Python-Client-Vulnerability-TLS-Certificate-verification-disabled-by-default-in-HashiCorp-Vault-KMS-Integration

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.