Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-vr82-gva6-eqh6
Vulnerability ID VCID-vr82-gva6-eqh6
Aliases CVE-2026-33558
GHSA-wf66-mphr-4c4r
Summary
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-533 DEPRECATED: Information Exposure Through Server Log Files
CWE-532 Insertion of Sensitive Information into Log File
System Score Found at
epss 0.00027 https://api.first.org/data/v1/epss?cve=CVE-2026-33558
epss 0.00108 https://api.first.org/data/v1/epss?cve=CVE-2026-33558
epss 0.00142 https://api.first.org/data/v1/epss?cve=CVE-2026-33558
epss 0.00142 https://api.first.org/data/v1/epss?cve=CVE-2026-33558
epss 0.00142 https://api.first.org/data/v1/epss?cve=CVE-2026-33558
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-wf66-mphr-4c4r
cvssv3.1 5.3 https://github.com/apache/kafka
generic_textual MODERATE https://github.com/apache/kafka
cvssv3.1 5.3 https://kafka.apache.org/cve-list
generic_textual MODERATE https://kafka.apache.org/cve-list
ssvc Track https://kafka.apache.org/cve-list
cvssv3.1 5.3 https://lists.apache.org/thread/pz5g4ky3h0k91tfd14p0dzqjp80960kl
generic_textual MODERATE https://lists.apache.org/thread/pz5g4ky3h0k91tfd14p0dzqjp80960kl
ssvc Track https://lists.apache.org/thread/pz5g4ky3h0k91tfd14p0dzqjp80960kl
cvssv3.1 5.3 https://nvd.nist.gov/vuln/detail/CVE-2026-33558
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2026-33558
cvssv3.1 5.3 http://www.openwall.com/lists/oss-security/2026/04/17/3
generic_textual MODERATE http://www.openwall.com/lists/oss-security/2026/04/17/3
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2026-33558
https://github.com/apache/kafka
https://kafka.apache.org/cve-list
http://www.openwall.com/lists/oss-security/2026/04/17/3
CVE-2026-33558 https://nvd.nist.gov/vuln/detail/CVE-2026-33558
GHSA-wf66-mphr-4c4r https://github.com/advisories/GHSA-wf66-mphr-4c4r
pz5g4ky3h0k91tfd14p0dzqjp80960kl https://lists.apache.org/thread/pz5g4ky3h0k91tfd14p0dzqjp80960kl
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/apache/kafka
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://kafka.apache.org/cve-list
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-20T14:20:28Z/ Found at https://kafka.apache.org/cve-list
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://lists.apache.org/thread/pz5g4ky3h0k91tfd14p0dzqjp80960kl
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-20T14:20:28Z/ Found at https://lists.apache.org/thread/pz5g4ky3h0k91tfd14p0dzqjp80960kl
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2026-33558
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://www.openwall.com/lists/oss-security/2026/04/17/3
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.07746
EPSS Score 0.00027
Published At April 21, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-22T03:41:35.438341+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.4.0