Is there a public PoC exploit available for CVE-2026-5562?

Yes, a public proof-of-concept exploit is available for CVE-2026-5562. Prioritise patching immediately. EPSS: 0.1%.

Kafka Ui CVE-2026-5562

Q: What is the CVSS score of CVE-2026-5562?

CVE-2026-5562 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-19071 MEDIUM

Code Injection (CWE-94)

2026-04-05 VulDB

GHSA-xcqp-9wgc-xxhj

Code Injection RCE Kafka Ui

5.5

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 29, 2026 - 01:11 NVD

6.9 (MEDIUM) 5.5 (MEDIUM)

PoC Detected

Apr 07, 2026 - 13:20 vuln.today

Public exploit code

EUVD ID Assigned

Apr 05, 2026 - 11:15 euvd

EUVD-2026-19071

Analysis Generated

Apr 05, 2026 - 11:15 vuln.today

CVE Published

Apr 05, 2026 - 11:00 nvd

MEDIUM 6.9

DescriptionCVE.org

A vulnerability was identified in provectus kafka-ui up to 0.7.2. This impacts the function validateAccess of the file /api/smartfilters/testexecutions of the component Endpoint. The manipulation leads to code injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Code injection in Provectus kafka-ui up to version 0.7.2 allows unauthenticated remote attackers to execute arbitrary code via the validateAccess function in the /api/smartfilters/testexecutions endpoint. The vulnerability has publicly available exploit code and carries a CVSS 6.9 score reflecting moderate but meaningful real-world risk; the vendor was contacted early but provided no response, suggesting no patch is anticipated.

Technical ContextAI

The vulnerability stems from unsafe code injection handling (CWE-94: Improper Control of Generation of Code) in the smart filters test executions API endpoint of kafka-ui, a web-based Kafka cluster management tool. The validateAccess function fails to properly sanitize or validate user-supplied input before processing it as code, allowing attackers to inject arbitrary payloads. Kafka-ui is a standalone web UI built in Java/Kotlin for Apache Kafka administration and monitoring, making this endpoint a direct attack surface for remote code execution when improperly secured.

RemediationAI

Immediate upgrade to a version newer than 0.7.2 is the primary remediation, though no specific patched version is confirmed from available data; organizations should verify the latest available kafka-ui release from the official Provectus repository (https://github.com/provectus/kafka-ui) and test before deployment. If upgrade is not immediately possible, implement network-level access controls to restrict access to the /api/smartfilters/testexecutions endpoint, use reverse proxy authentication to require valid credentials despite the endpoint's lack of built-in auth, and monitor for suspicious payloads in request logs. Reference CVE details available via https://vuldb.com/vuln/355332 for additional mitigation guidance.