CVE-2026-105941 | Apache Kroxylicious kroxylicious-kms-provider-azure-key-vault-kms vaultName server-side request forgery

October 20, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Apache Kroxylicious. Affected by this vulnerability is an unknown functionality of the component kroxylicious-kms-provider-azure-key-vault-kms. Such manipulation of the argument vaultName leads to server-side request forgery.

This vulnerability is traded as CVE-2026-105941. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More