CVE-2026-84501: Apache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProvider

<p>Posted by Andor Molnar on Sep 15</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache ZooKeeper (org.apache.zookeeper:zookeeper) 3.9.0 through 3.9.5<br /> - Apache ZooKeeper (org.apache.zookeeper:zookeeper) 3.8.0 through 3.8.6<br /> <br /> Description:<br /> <br /> An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper&apos;s operational lo