provectus CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW provectus CVE published 2026-08-24

CVE-2026-78166

A security flaw has been discovered in provectus kafka-ui up to 0.7.2, affecting the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/provectus/kafka/ui/controller/MessagesController.java in the Groovy Code Handler, leading to code injection. The attack may be launched remotely. This issue was reported to the project early but has not yet received a response. Defenders should ass [truncated]