CVE-2026-59969: Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS mode

<p>Posted by Andor Molnar on Sep 15</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache ZooKeeper (org.apache.zookeeper:zookeeper) 3.9.0 through 3.9.5<br /> - Apache ZooKeeper (org.apache.zookeeper:zookeeper) 3.8.0 through 3.8.6<br /> <br /> Description:<br /> <br /> Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When ssl