Provectus vulnerabilities
We track 3 vulnerabilities in Provectus products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 5, 2026.
Latest Provectus vulnerabilities
- 9.8 Critical severity
kafka-ui: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in provectus kafka-ui up to 0.7.2. This impacts the function validateAccess of the file /api/smartfilters/testexecutions of the component Endpoint. The manipulation leads to code injection. The attack can be initiated remotely. T
- 8.1 High severity
kafka-ui: Improper Control of Generation of Code
Kafka UI is an Open-Source Web UI for Apache Kafka Management. Kafka UI API allows users to connect to different Kafka brokers by specifying their network address and port. As a separate feature, it also provides the ability to monitor the performance of Kafka
- 8.8 High severity
UI: Improper Control of Generation of Code
An issue discovered in provectus kafka-ui 0.4.0 through 0.7.2 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/{topic}/messages. No fixed release is available; the project has had no commit since 2024-04-08.