cve-2026-59739
MEDIUM CVSS 6.5 csaf_redhat
Description
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Timeline
- Published
- 2026-09-16 09:26 UTC
- Last Modified
- 2026-09-28
CVSS Details
CVSS details not available.
Affected Products
No product information available.
Weaknesses (CWE)
References
No references available.
Linked Vulnerabilities
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright © Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59739.json"
}
],
"title": "zookeeper: Apache ZooKeeper: Information disclosure via SetWatches reconnect replay",
"tracking": {
"current_release_date": "2026-09-28T06:34:38+00:00",
"generator": {
"date": "2026-09-28T06:34:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "CVE-2026-59739",
"initial_release_date": "2026-09-16T09:26:37.690000+00:00",
"revision_history": [
{
"date": "2026-09-16T09:26:37.690000+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-28T06:25:56+00:00",
"number": "2",
"summary": "Current version"
},
{
"date": "2026-09-28T06:34:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat AMQ Broker 7",
"product": {
"name": "Red Hat AMQ Broker 7",
"product_id": "red_hat_amq_broker_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:amq_broker:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat AMQ Broker 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Apache Camel 4 for Quarkus 3",
"product": {
"name": "Red Hat build of Apache Camel 4 for Quarkus 3",
"product_id": "red_hat_build_of_apache_camel_4_for_quarkus_3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:camel_quarkus:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Apache Camel 4 for Quarkus 3"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Apache Camel for Spring Boot 4",
"product": {
"name": "Red Hat build of Apache Camel for Spring Boot 4",
"product_id": "red_hat_build_of_apache_camel_for_spring_boot_4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:camel_spring_boot:4"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Apache Camel for Spring Boot 4"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Fuse 7",
"product": {
"name": "Red Hat Fuse 7",
"product_id": "red_hat_fuse_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_fuse:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Fuse 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 8",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 8",
"product_id": "red_hat_jboss_enterprise_application_platform_8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform 8"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jbosseapxp"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform Expansion Pack"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Offline Knowledge Portal",
"product": {
"name": "Red Hat Offline Knowledge Portal",
"product_id": "red_hat_offline_knowledge_portal",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:offline_knowledge_portal:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Offline Knowledge Portal"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift AI (RHOAI)",
"product": {
"name": "Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai)",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_ai"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift AI (RHOAI)"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 13 (Queens)",
"product": {
"name": "Red Hat OpenStack Platform 13 (Queens)",
"product_id": "red_hat_openstack_platform_13_(queens)",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:13"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform 13 (Queens)"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 16.2",
"product": {
"name": "Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:16.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform 16.2"
},
{
"category": "product_version",
"name": "parent",
"product": {
"name": "parent",
"product_id": "parent",
"product_identification_helper": {
"purl": "pkg:maven/org.apache.zookeeper/parent"
}
}
},
{
"category": "product_version",
"name": "zookeeper",
"product": {
"name": "zookeeper",
"product_id": "zookeeper",
"product_identification_helper": {
"purl": "pkg:maven/org.apache.zookeeper/zookeeper"
}
}
},
{
"category": "product_version",
"name": "zookeeper-jute",
"product": {
"name": "zookeeper-jute",
"product_id": "zookeeper-jute",
"product_identification_helper": {
"purl": "pkg:maven/org.apache.zookeeper/zookeeper-jute"
}
}
},
{
"category": "product_version",
"name": "flink-shaded-zookeeper-3",
"product": {
"name": "flink-shaded-zookeeper-3",
"product_id": "flink-shaded-zookeeper-3",
"product_identification_helper": {
"purl": "pkg:maven/org.apache.flink/flink-shaded-zookeeper-3"
}
}
},
{
"category": "product_version",
"name": "flink-shaded-zookeeper-parent",
"product": {
"name": "flink-shaded-zookeeper-parent",
"product_id": "flink-shaded-zookeeper-parent",
"product_identification_helper": {
"purl": "pkg:maven/org.apache.flink/flink-shaded-zookeeper-parent"
}
}
},
{
"category": "product_version",
"name": "camel-spring-cloud-zookeeper",
"product": {
"name": "camel-spring-cloud-zookeeper",
"product_id": "camel-spring-cloud-zookeeper",
"product_identification_helper": {
"purl": "pkg:maven/org.apache.camel/camel-spring-cloud-zookeeper"
}
}
},
{
"category": "product_version",
"name": "camel-spring-cloud-zookeeper-starter",
"product": {
"name": "camel-spring-cloud-zookeeper-starter",
"product_id": "camel-spring-cloud-zookeeper-starter",
"product_identification_helper": {
"purl": "pkg:maven/org.apache.camel/camel-spring-cloud-zookeeper-starter"
}
}
},
{
"category": "product_version",
"name": "camel-zookeeper",
"product": {
"name": "camel-zookeeper",
"product_id": "camel-zookeeper",
"product_identification_helper": {
"purl": "pkg:maven/org.apache.camel/camel-zookeeper"
}
}
},
{
"category": "product_version",
"name": "camel-zookeeper-master",
"product": {
"name": "camel-zookeeper-master",
"product_id": "camel-zookeeper-master",
"product_identification_helper": {
"purl": "pkg:maven/org.apache.camel/camel-zookeeper-master"
}
}
},
{
"category": "product_version",
"name": "camel-zookeeper-master-starter",
"product": {
"name": "camel-zookeeper-master-starter",
"product_id": "camel-zookeeper-master-starter",
"product_identification_helper": {
"purl": "pkg:maven/org.apache.camel/camel-zookeeper-master-starter"
}
}
},
{
"category": "product_version",
"name": "camel-zookeeper-starter",
"product": {
"name": "camel-zookeeper-starter",
"product_id": "camel-zookeeper-starter",
"product_identification_helper": {
"purl": "pkg:maven/org.apache.camel/camel-zookeeper-starter"
}
}
},
{
"category": "product_version",
"name": "org.linkedin.zookeeper-impl",
"product": {
"name": "org.linkedin.zookeeper-impl",
"product_id": "org.linkedin.zookeeper-impl",
"product_identification_helper": {
"purl": "pkg:maven/org.linkedin/org.linkedin.zookeeper-impl"
}
}
},
{
"category": "product_version",
"name": "spring-cloud-starter-zookeeper",
"product": {
"name": "spring-cloud-starter-zookeeper",
"product_id": "spring-cloud-starter-zookeeper",
"product_identification_helper": {
"purl": "pkg:maven/org.springframework.cloud/spring-cloud-starter-zookeeper"
}
}
},
{
"category": "product_version",
"name": "spring-cloud-starter-zookeeper-discovery",
"product": {
"name": "spring-cloud-starter-zookeeper-discovery",
"product_id": "spring-cloud-starter-zookeeper-discovery",
"product_identification_helper": {
"purl": "pkg:maven/org.springframework.cloud/spring-cloud-starter-zookeeper-discovery"
}
}
},
{
"category": "product_version",
"name": "spring-cloud-zookeeper-core",
"product": {
"name": "spring-cloud-zookeeper-core",
"product_id": "spring-cloud-zookeeper-core",
"product_identification_helper": {
"purl": "pkg:maven/org.springframework.cloud/spring-cloud-zookeeper-core"
}
}
},
{
"category": "product_version",
"name": "spring-cloud-zookeeper-discovery",
"product": {
"name": "spring-cloud-zookeeper-discovery",
"product_id": "spring-cloud-zookeeper-discovery",
"product_identification_helper": {
"purl": "pkg:maven/org.springframework.cloud/spring-cloud-zookeeper-discovery"
}
}
},
{
"category": "product_version",
"name": "offline-knowledge-portal/rhokp-rhel9",
"product": {
"name": "offline-knowledge-portal/rhokp-rhel9",
"product_id": "offline-knowledge-portal/rhokp-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/rhokp-rhel9?repository_url=registry.redhat.io/offline-knowledge-portal/rhokp-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-modelmesh-rhel9",
"product": {
"name": "rhoai/odh-modelmesh-rhel9",
"product_id": "rhoai/odh-modelmesh-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/odh-modelmesh-rhel9?repository_url=registry.redhat.io/rhoai/odh-modelmesh-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-spark-operator-rhel9",
"product": {
"name": "rhoai/odh-spark-operator-rhel9",
"product_id": "rhoai/odh-spark-operator-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/odh-spark-operator-rhel9?repository_url=registry.redhat.io/rhoai/odh-spark-operator-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-th06-cpu-torch210-py312-rhel9",
"product": {
"name": "rhoai/odh-th06-cpu-torch210-py312-rhel9",
"product_id": "rhoai/odh-th06-cpu-torch210-py312-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/odh-th06-cpu-torch210-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th06-cpu-torch210-py312-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-th06-cpu-torch291-py312-rhel9",
"product": {
"name": "rhoai/odh-th06-cpu-torch291-py312-rhel9",
"product_id": "rhoai/odh-th06-cpu-torch291-py312-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/odh-th06-cpu-torch291-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th06-cpu-torch291-py312-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-th06-cuda130-torch210-py312-rhel9",
"product": {
"name": "rhoai/odh-th06-cuda130-torch210-py312-rhel9",
"product_id": "rhoai/odh-th06-cuda130-torch210-py312-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/odh-th06-cuda130-torch210-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th06-cuda130-torch210-py312-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"product": {
"name": "rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"product_id": "rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/odh-th06-cuda130-torch291-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th06-cuda130-torch291-py312-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-th06-rocm64-torch291-py312-rhel9",
"product": {
"name": "rhoai/odh-th06-rocm64-torch291-py312-rhel9",
"product_id": "rhoai/odh-th06-rocm64-torch291-py312-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/odh-th06-rocm64-torch291-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th06-rocm64-torch291-py312-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-th-torch-cpu-py312-rhel9",
"product": {
"name": "rhoai/odh-th-torch-cpu-py312-rhel9",
"product_id": "rhoai/odh-th-torch-cpu-py312-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/odh-th-torch-cpu-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th-torch-cpu-py312-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-th-torch-cuda-py312-rhel9",
"product": {
"name": "rhoai/odh-th-torch-cuda-py312-rhel9",
"product_id": "rhoai/odh-th-torch-cuda-py312-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/odh-th-torch-cuda-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th-torch-cuda-py312-rhel9"
}
}
},
{
"category": "product_version",
"name": "puppet-zookeeper.src",
"product": {
"name": "puppet-zookeeper.src",
"product_id": "puppet-zookeeper.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-zookeeper?arch=src"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "parent as a component of Red Hat AMQ Broker 7",
"product_id": "red_hat_amq_broker_7:parent"
},
"product_reference": "parent",
"relates_to_product_reference": "red_hat_amq_broker_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zookeeper as a component of Red Hat AMQ Broker 7",
"product_id": "red_hat_amq_broker_7:zookeeper"
},
"product_reference": "zookeeper",
"relates_to_product_reference": "red_hat_amq_broker_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zookeeper-jute as a component of Red Hat AMQ Broker 7",
"product_id": "red_hat_amq_broker_7:zookeeper-jute"
},
"product_reference": "zookeeper-jute",
"relates_to_product_reference": "red_hat_amq_broker_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flink-shaded-zookeeper-3 as a component of Red Hat build of Apache Camel 4 for Quarkus 3",
"product_id": "red_hat_build_of_apache_camel_4_for_quarkus_3:flink-shaded-zookeeper-3"
},
"product_reference": "flink-shaded-zookeeper-3",
"relates_to_product_reference": "red_hat_build_of_apache_camel_4_for_quarkus_3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flink-shaded-zookeeper-3 as a component of Red Hat build of Apache Camel for Spring Boot 4",
"product_id": "red_hat_build_of_apache_camel_for_spring_boot_4:flink-shaded-zookeeper-3"
},
"product_reference": "flink-shaded-zookeeper-3",
"relates_to_product_reference": "red_hat_build_of_apache_camel_for_spring_boot_4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flink-shaded-zookeeper-parent as a component of Red Hat build of Apache Camel for Spring Boot 4",
"product_id": "red_hat_build_of_apache_camel_for_spring_boot_4:flink-shaded-zookeeper-parent"
},
"product_reference": "flink-shaded-zookeeper-parent",
"relates_to_product_reference": "red_hat_build_of_apache_camel_for_spring_boot_4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "camel-spring-cloud-zookeeper as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:camel-spring-cloud-zookeeper"
},
"product_reference": "camel-spring-cloud-zookeeper",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "camel-spring-cloud-zookeeper-starter as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:camel-spring-cloud-zookeeper-starter"
},
"product_reference": "camel-spring-cloud-zookeeper-starter",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "camel-zookeeper as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:camel-zookeeper"
},
"product_reference": "camel-zookeeper",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "camel-zookeeper-master as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:camel-zookeeper-master"
},
"product_reference": "camel-zookeeper-master",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "camel-zookeeper-master-starter as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:camel-zookeeper-master-starter"
},
"product_reference": "camel-zookeeper-master-starter",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "camel-zookeeper-starter as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:camel-zookeeper-starter"
},
"product_reference": "camel-zookeeper-starter",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flink-shaded-zookeeper-3 as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:flink-shaded-zookeeper-3"
},
"product_reference": "flink-shaded-zookeeper-3",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "org.linkedin.zookeeper-impl as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:org.linkedin.zookeeper-impl"
},
"product_reference": "org.linkedin.zookeeper-impl",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spring-cloud-starter-zookeeper as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:spring-cloud-starter-zookeeper"
},
"product_reference": "spring-cloud-starter-zookeeper",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spring-cloud-starter-zookeeper-discovery as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:spring-cloud-starter-zookeeper-discovery"
},
"product_reference": "spring-cloud-starter-zookeeper-discovery",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spring-cloud-zookeeper-core as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:spring-cloud-zookeeper-core"
},
"product_reference": "spring-cloud-zookeeper-core",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spring-cloud-zookeeper-discovery as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:spring-cloud-zookeeper-discovery"
},
"product_reference": "spring-cloud-zookeeper-discovery",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zookeeper as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:zookeeper"
},
"product_reference": "zookeeper",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zookeeper-jute as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:zookeeper-jute"
},
"product_reference": "zookeeper-jute",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "parent as a component of Red Hat JBoss Enterprise Application Platform 8",
"product_id": "red_hat_jboss_enterprise_application_platform_8:parent"
},
"product_reference": "parent",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zookeeper as a component of Red Hat JBoss Enterprise Application Platform 8",
"product_id": "red_hat_jboss_enterprise_application_platform_8:zookeeper"
},
"product_reference": "zookeeper",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "parent as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack",
"product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:parent"
},
"product_reference": "parent",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "zookeeper as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack",
"product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:zookeeper"
},
"product_reference": "zookeeper",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "offline-knowledge-portal/rhokp-rhel9 as a component of Red Hat Offline Knowledge Portal",
"product_id": "red_hat_offline_knowledge_portal:offline-knowledge-portal/rhokp-rhel9"
},
"product_reference": "offline-knowledge-portal/rhokp-rhel9",
"relates_to_product_reference": "red_hat_offline_knowledge_portal"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-modelmesh-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-modelmesh-rhel9"
},
"product_reference": "rhoai/odh-modelmesh-rhel9",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-spark-operator-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-spark-operator-rhel9"
},
"product_reference": "rhoai/odh-spark-operator-rhel9",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-th-torch-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cpu-py312-rhel9"
},
"product_reference": "rhoai/odh-th-torch-cpu-py312-rhel9",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-th-torch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9"
},
"product_reference": "rhoai/odh-th-torch-cuda-py312-rhel9",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9"
},
"product_reference": "rhoai/odh-th06-cpu-torch210-py312-rhel9",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-th06-cpu-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch291-py312-rhel9"
},
"product_reference": "rhoai/odh-th06-cpu-torch291-py312-rhel9",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-th06-cuda130-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch210-py312-rhel9"
},
"product_reference": "rhoai/odh-th06-cuda130-torch210-py312-rhel9",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-th06-cuda130-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9"
},
"product_reference": "rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-th06-rocm64-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-th06-rocm64-torch291-py312-rhel9"
},
"product_reference": "rhoai/odh-th06-rocm64-torch291-py312-rhel9",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-zookeeper.src as a component of Red Hat OpenStack Platform 13 (Queens)",
"product_id": "red_hat_openstack_platform_13_(queens):puppet-zookeeper.src"
},
"product_reference": "puppet-zookeeper.src",
"relates_to_product_reference": "red_hat_openstack_platform_13_(queens)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-zookeeper.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "red_hat_openstack_platform_16.2:puppet-zookeeper.src"
},
"product_reference": "puppet-zookeeper.src",
"relates_to_product_reference": "red_hat_openstack_platform_16.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-59739",
"cwe": {
"id": "CWE-425",
"name": "Direct Request ('Forced Browsing')"
},
"discovery_date": "2026-09-16T09:41:07.087726+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2535093"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache ZooKeeper. This vulnerability allows a remote attacker to discover paths that should be restricted by Access Control Lists (ACLs). By registering watches on non-existent paths and then reconnecting after these paths are created with restricted ACLs, the attacker can bypass security checks. This information disclosure could expose sensitive path details, such as usernames or login identifiers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "zookeeper: Apache ZooKeeper: Information disclosure via SetWatches reconnect replay",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Apache ZooKeeper. A missing ACL check in the SetWatches/SetWatches2 reconnect replay handler allows authenticated clients to discover ACL-restricted znode paths. While the path names are exposed, the actual znode data remains protected. This is an incomplete fix for CVE-2024-23944. This issue affects Apache ZooKeeper versions 3.8.0 through 3.8.6 and 3.9.0 through 3.9.5.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"known_affected": [
"red_hat_amq_broker_7:parent",
"red_hat_amq_broker_7:zookeeper",
"red_hat_amq_broker_7:zookeeper-jute",
"red_hat_build_of_apache_camel_4_for_quarkus_3:flink-shaded-zookeeper-3",
"red_hat_build_of_apache_camel_for_spring_boot_4:flink-shaded-zookeeper-3",
"red_hat_build_of_apache_camel_for_spring_boot_4:flink-shaded-zookeeper-parent",
"red_hat_fuse_7:camel-spring-cloud-zookeeper",
"red_hat_fuse_7:camel-spring-cloud-zookeeper-starter",
"red_hat_fuse_7:camel-zookeeper",
"red_hat_fuse_7:camel-zookeeper-master",
"red_hat_fuse_7:camel-zookeeper-master-starter",
"red_hat_fuse_7:camel-zookeeper-starter",
"red_hat_fuse_7:flink-shaded-zookeeper-3",
"red_hat_fuse_7:org.linkedin.zookeeper-impl",
"red_hat_fuse_7:spring-cloud-starter-zookeeper",
"red_hat_fuse_7:spring-cloud-starter-zookeeper-discovery",
"red_hat_fuse_7:spring-cloud-zookeeper-core",
"red_hat_fuse_7:spring-cloud-zookeeper-discovery",
"red_hat_fuse_7:zookeeper",
"red_hat_fuse_7:zookeeper-jute",
"red_hat_jboss_enterprise_application_platform_8:parent",
"red_hat_jboss_enterprise_application_platform_8:zookeeper",
"red_hat_jboss_enterprise_application_platform_expansion_pack:parent",
"red_hat_jboss_enterprise_application_platform_expansion_pack:zookeeper",
"red_hat_offline_knowledge_portal:offline-knowledge-portal/rhokp-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-modelmesh-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-spark-operator-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cpu-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch291-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch210-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-rocm64-torch291-py312-rhel9",
"red_hat_openstack_platform_13_(queens):puppet-zookeeper.src",
"red_hat_openstack_platform_16.2:puppet-zookeeper.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59739"
},
{
"category": "external",
"summary": "RHBZ#2535093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535093"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59739",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59739"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59739",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59739"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/v0lrwsbdxvx6w67p3z7fxf3hzyncq55l",
"url": "https://lists.apache.org/thread/v0lrwsbdxvx6w67p3z7fxf3hzyncq55l"
}
],
"release_date": "2026-09-16T09:26:37.690000+00:00",
"remediations": [
{
"category": "workaround",
"details": "Update to Apache ZooKeeper 3.8.7, 3.9.6, or later.",
"product_ids": [
"red_hat_amq_broker_7:parent",
"red_hat_amq_broker_7:zookeeper",
"red_hat_amq_broker_7:zookeeper-jute",
"red_hat_build_of_apache_camel_4_for_quarkus_3:flink-shaded-zookeeper-3",
"red_hat_build_of_apache_camel_for_spring_boot_4:flink-shaded-zookeeper-3",
"red_hat_build_of_apache_camel_for_spring_boot_4:flink-shaded-zookeeper-parent",
"red_hat_fuse_7:camel-spring-cloud-zookeeper",
"red_hat_fuse_7:camel-spring-cloud-zookeeper-starter",
"red_hat_fuse_7:camel-zookeeper",
"red_hat_fuse_7:camel-zookeeper-master",
"red_hat_fuse_7:camel-zookeeper-master-starter",
"red_hat_fuse_7:camel-zookeeper-starter",
"red_hat_fuse_7:flink-shaded-zookeeper-3",
"red_hat_fuse_7:org.linkedin.zookeeper-impl",
"red_hat_fuse_7:spring-cloud-starter-zookeeper",
"red_hat_fuse_7:spring-cloud-starter-zookeeper-discovery",
"red_hat_fuse_7:spring-cloud-zookeeper-core",
"red_hat_fuse_7:spring-cloud-zookeeper-discovery",
"red_hat_fuse_7:zookeeper",
"red_hat_fuse_7:zookeeper-jute",
"red_hat_jboss_enterprise_application_platform_8:parent",
"red_hat_jboss_enterprise_application_platform_8:zookeeper",
"red_hat_jboss_enterprise_application_platform_expansion_pack:parent",
"red_hat_jboss_enterprise_application_platform_expansion_pack:zookeeper",
"red_hat_offline_knowledge_portal:offline-knowledge-portal/rhokp-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-modelmesh-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-spark-operator-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cpu-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch291-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch210-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-rocm64-torch291-py312-rhel9",
"red_hat_openstack_platform_13_(queens):puppet-zookeeper.src",
"red_hat_openstack_platform_16.2:puppet-zookeeper.src"
]
},
{
"category": "none_available",
"details": "Fix deferred",
"product_ids": [
"red_hat_amq_broker_7:parent",
"red_hat_amq_broker_7:zookeeper",
"red_hat_amq_broker_7:zookeeper-jute",
"red_hat_build_of_apache_camel_4_for_quarkus_3:flink-shaded-zookeeper-3",
"red_hat_build_of_apache_camel_for_spring_boot_4:flink-shaded-zookeeper-3",
"red_hat_build_of_apache_camel_for_spring_boot_4:flink-shaded-zookeeper-parent",
"red_hat_fuse_7:camel-spring-cloud-zookeeper",
"red_hat_fuse_7:camel-spring-cloud-zookeeper-starter",
"red_hat_fuse_7:camel-zookeeper",
"red_hat_fuse_7:camel-zookeeper-master",
"red_hat_fuse_7:camel-zookeeper-master-starter",
"red_hat_fuse_7:camel-zookeeper-starter",
"red_hat_fuse_7:flink-shaded-zookeeper-3",
"red_hat_fuse_7:org.linkedin.zookeeper-impl",
"red_hat_fuse_7:spring-cloud-starter-zookeeper",
"red_hat_fuse_7:spring-cloud-starter-zookeeper-discovery",
"red_hat_fuse_7:spring-cloud-zookeeper-core",
"red_hat_fuse_7:spring-cloud-zookeeper-discovery",
"red_hat_fuse_7:zookeeper",
"red_hat_fuse_7:zookeeper-jute",
"red_hat_jboss_enterprise_application_platform_8:parent",
"red_hat_jboss_enterprise_application_platform_8:zookeeper",
"red_hat_jboss_enterprise_application_platform_expansion_pack:parent",
"red_hat_jboss_enterprise_application_platform_expansion_pack:zookeeper",
"red_hat_offline_knowledge_portal:offline-knowledge-portal/rhokp-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-modelmesh-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-spark-operator-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cpu-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch291-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch210-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-rocm64-torch291-py312-rhel9",
"red_hat_openstack_platform_13_(queens):puppet-zookeeper.src",
"red_hat_openstack_platform_16.2:puppet-zookeeper.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"red_hat_amq_broker_7:parent",
"red_hat_amq_broker_7:zookeeper",
"red_hat_amq_broker_7:zookeeper-jute",
"red_hat_build_of_apache_camel_4_for_quarkus_3:flink-shaded-zookeeper-3",
"red_hat_build_of_apache_camel_for_spring_boot_4:flink-shaded-zookeeper-3",
"red_hat_build_of_apache_camel_for_spring_boot_4:flink-shaded-zookeeper-parent",
"red_hat_fuse_7:camel-spring-cloud-zookeeper",
"red_hat_fuse_7:camel-spring-cloud-zookeeper-starter",
"red_hat_fuse_7:camel-zookeeper",
"red_hat_fuse_7:camel-zookeeper-master",
"red_hat_fuse_7:camel-zookeeper-master-starter",
"red_hat_fuse_7:camel-zookeeper-starter",
"red_hat_fuse_7:flink-shaded-zookeeper-3",
"red_hat_fuse_7:org.linkedin.zookeeper-impl",
"red_hat_fuse_7:spring-cloud-starter-zookeeper",
"red_hat_fuse_7:spring-cloud-starter-zookeeper-discovery",
"red_hat_fuse_7:spring-cloud-zookeeper-core",
"red_hat_fuse_7:spring-cloud-zookeeper-discovery",
"red_hat_fuse_7:zookeeper",
"red_hat_fuse_7:zookeeper-jute",
"red_hat_jboss_enterprise_application_platform_8:parent",
"red_hat_jboss_enterprise_application_platform_8:zookeeper",
"red_hat_jboss_enterprise_application_platform_expansion_pack:parent",
"red_hat_jboss_enterprise_application_platform_expansion_pack:zookeeper",
"red_hat_offline_knowledge_portal:offline-knowledge-portal/rhokp-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-modelmesh-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-spark-operator-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cpu-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch291-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch210-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-rocm64-torch291-py312-rhel9",
"red_hat_openstack_platform_13_(queens):puppet-zookeeper.src",
"red_hat_openstack_platform_16.2:puppet-zookeeper.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate",
"product_ids": [
"red_hat_amq_broker_7:parent",
"red_hat_amq_broker_7:zookeeper",
"red_hat_amq_broker_7:zookeeper-jute",
"red_hat_build_of_apache_camel_4_for_quarkus_3:flink-shaded-zookeeper-3",
"red_hat_build_of_apache_camel_for_spring_boot_4:flink-shaded-zookeeper-3",
"red_hat_build_of_apache_camel_for_spring_boot_4:flink-shaded-zookeeper-parent",
"red_hat_fuse_7:camel-spring-cloud-zookeeper",
"red_hat_fuse_7:camel-spring-cloud-zookeeper-starter",
"red_hat_fuse_7:camel-zookeeper",
"red_hat_fuse_7:camel-zookeeper-master",
"red_hat_fuse_7:camel-zookeeper-master-starter",
"red_hat_fuse_7:camel-zookeeper-starter",
"red_hat_fuse_7:flink-shaded-zookeeper-3",
"red_hat_fuse_7:org.linkedin.zookeeper-impl",
"red_hat_fuse_7:spring-cloud-starter-zookeeper",
"red_hat_fuse_7:spring-cloud-starter-zookeeper-discovery",
"red_hat_fuse_7:spring-cloud-zookeeper-core",
"red_hat_fuse_7:spring-cloud-zookeeper-discovery",
"red_hat_fuse_7:zookeeper",
"red_hat_fuse_7:zookeeper-jute",
"red_hat_jboss_enterprise_application_platform_8:parent",
"red_hat_jboss_enterprise_application_platform_8:zookeeper",
"red_hat_jboss_enterprise_application_platform_expansion_pack:parent",
"red_hat_jboss_enterprise_application_platform_expansion_pack:zookeeper",
"red_hat_offline_knowledge_portal:offline-knowledge-portal/rhokp-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-modelmesh-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-spark-operator-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cpu-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch291-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch210-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-rocm64-torch291-py312-rhel9",
"red_hat_openstack_platform_13_(queens):puppet-zookeeper.src",
"red_hat_openstack_platform_16.2:puppet-zookeeper.src"
]
}
],
"title": "zookeeper: Apache ZooKeeper: Information disclosure via SetWatches reconnect replay"
}
]
}