Security Advisories and Security Release Notes
Follow this section for security advisory notifications
- Security Release Notes for CP 8.4.1
- Security Release Notes for CP 8.3.3
- Security Release Notes for CP 8.2.5
- Security Release Notes for CP 8.1.7
- Security Release Notes for CP 8.0.9
- Security Release Notes for CP 7.9.11
- Security Release Notes for CP 7.8.12
- Security Release Notes for CP 7.7.13
- Security Release Notes for CP 7.6.15
- CONFSA-2026-22: CVE-2026-15911: Confluent Kafka Python Client Vulnerability - TLS Certificate verification disabled by default in HashiCorp Vault KMS Integration
- Security Release Notes for CPC Gateway
- Security Release Notes for CFK 3.3.1
- Security Release Notes for Control Center Next Generation
- CONFSA-2026-21: Confluent Platform Vulnerability: Missing Per-User Authorization Check in ksqlDB /query-stream Pull Queries
- Security Release Notes for CFK 3.2.4
- Security Release Notes for CFK 3.1.4
- Security Release Notes for CFK 3.0.6
- Security Release Notes for CFK 2.11.7
- Security Release Notes for CFK 2.10.7
- Security Release Notes for USM agent
- Security Release Notes for CP 8.3.2
- Security Release Notes for CP 8.2.4
- Security Release Notes for CP 8.1.6
- Security Release Notes for CP 8.0.8
- Security Release Notes for CP 7.9.10
- Security Release Notes for CP 7.8.11
- Security Release Notes for CP 7.7.12
- Security Release Notes for CP 7.6.14
- CONFSA-2026-15: Confluent Cloud and Confluent Platform Vulnerability: Denial of Service in Schema Registry via external schema references
- CONFSA-2026-14: Confluent Platform Vulnerability - Server-Side Request Forgery (SSRF) to internal endpoints via cluster link token login handler configuration