CVE-2026-100300
— UNSCOREDPublished 2026-11-04 · Updated 2026-11-04
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write under the /zookeeper/quota subtree — unauthenticated on default deployments, where that subtree is world-writable — to crash the server's critical request-processing thread and render the on-disk data directory permanently unbootable. This issue affects Apache ZooKeeper up to and including 3.9.6. Users are recommended to upgrade to version 3.8.8 or 3.9.7, which fixes the issue.
Weaknesses
CWE-755
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-101016
- MEDIUMCVE-2026-101017
- MEDIUMCVE-2026-101099PoC
- MEDIUMCVE-2026-102274PoC
- HIGHCVE-2026-103936PoC
- MEDIUMCVE-2026-105242PoC
- MEDIUMCVE-2026-105757PoC
- CRITICALCVE-2026-109618PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.