Redpanda Data

2 CVEs in 2 Redpanda Data products, including Connect, Redpanda. Newest: CVE-2026-123270 (2026-11-09). Severity, EPSS and public exploits for each.

Redpanda Data products with known CVEs

ProductCVEs
Connect1
Redpanda1
Redpanda Data CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-123270Critical9.82026-11-09Redpanda Connect versions 4.39 to 4.110 contain a missing authentication vulnerability that enables unauthenticated remote code execution (RCE). In streams mod…
CVE-2026-82266Critical9.82026-08-28Redpanda through 26.2.2 binds the Admin API to 0.0.0.0:9644 with admin_api_require_auth defaulting to false, treating unauthenticated requests as superusers. A…