Skip to content
Apache vulnerabilities
Products
Show 160 moreShow less
Newest
-
apache fineract
Apache Fineract: SQL injection vulnerability in Search API
CVE-2026-64618
9.8 Critical
-
apache fineract
Apache Fineract: SQL injection via ORDER BY parameters in the Center and datatables endpoints
CVE-2026-65874
8.8 High
-
@nx gradle, maven, nrwl nx +2 more
Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle
CVE-2026-119282
Fix available
7.3 High
-
apache camel
Apache Camel: Camel-AWS2-S3 Producer Evaluates Untrusted S3 Object Keys From the CamelAwsS3Key Header as Simple Expressions
CVE-2026-95664
Public exploit
5.4 Medium
-
apache cxf
Apache CXF: Prevent unbounded XML document size in StaxUtils by adding default element and character limits
CVE-2026-108039
7.5 High
-
apache cxf
Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification.
CVE-2026-107938
9.1 Critical
-
apache cxf
Apache CXF: The attachment header size and count limits can be bypassed, which allows denial of service through memory exhaustion.
CVE-2026-107937
7.5 High
-
apache cxf
Apache CXF: XML Signature wrapping in JAX-RS XML Security
CVE-2026-100227
7.5 High
-
apache cxf
Apache CXF: STSTokenValidator can accept untrusted SAML assertions because it shares validation state between requests
CVE-2026-97791
7.5 High
-
apache cxf
Apache CXF: Authentication bypass via weak cache keys for validated STS tokens
CVE-2026-97468
9.1 Critical
-
apache cxf
Apache CXF: FIQL Query Parser Denial of Service
CVE-2026-86463
7.5 High
-
apache cxf
Apache CXF: OIDC RP Open Redirect
CVE-2026-79650
6.1 Medium
-
apache cxf
Apache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processing (Decompression Bomb)
CVE-2026-78384
7.5 High
-
apache cxf
Apache CXF: JPA authorization-code consume is non-atomic
CVE-2026-73179
8.1 High
-
apache cxf
Apache CXF: Inoperative max_age authentication-freshness check in OidcClientCodeRequestFilter
CVE-2026-71575
9.1 Critical
-
apache jackrabbit
Apache Jackrabbit: DavEx client runs Class.forName + (String)-constructor on server-controlled error bodies
CVE-2026-92415
6.9 Medium
-
apache jackrabbit
Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokens
CVE-2026-92414
9.3 Critical
-
apache impala
Apache Impala: Path traversal executes JARs outside trusted paths
CVE-2026-90466
6.5 Medium
-
apache log4net
Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content
CVE-2026-105244
5.3 Medium
-
apache log4net
Apache log4net: Oversize EventLogAppender record silently discarded
CVE-2026-105243
5.3 Medium
-
apache log4net
Apache log4net: Request validation failure drops the event in the aspnet-request converter
CVE-2026-105242
5.3 Medium
-
apache log4net
Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch
CVE-2026-105241
5.3 Medium
-
apache log4net
Apache log4net: NUL character truncates OutputDebugStringAppender records
CVE-2026-105240
5.3 Medium
-
apache log4net
Apache log4net: NUL character truncates EventLogAppender records
CVE-2026-105239
5.3 Medium
-
apache struts
Apache Struts: Shared message formatter exposes date and time values across concurrent requests
CVE-2026-104714
8.8 High
-
apache struts
Apache Struts: Unbounded request body read in the REST plugin
CVE-2026-104713
6.5 Medium
-
apache struts
Apache Struts: Disproportionate response size when rendering BigDecimal request parameters
CVE-2026-104712
7.5 High
-
apache struts
Apache Struts: OGNL injection in the legacy RESTful action mapper
CVE-2026-104711
9.8 Critical
-
apache http server
Apache HTTP Server: mod_xml2enc crash on charset conversion failure
CVE-2026-63686
Public exploitFix available
7.5 High
-
apache http server
Apache HTTP Server: mod_dav_fs namespace overflow
CVE-2026-93546
Fix available
8.8 High
-
apache http server
Apache HTTP Server: mod_userdir information disclosure
CVE-2026-79768
Fix available
5.3 Medium
-
apache http server
Apache HTTP Server: mod_auth_digest DoS attack
CVE-2026-73637
Fix available
7.3 High
-
apache http server
Apache HTTP Server: mod_auth_digest one-time-nonce replay attack
CVE-2026-73636
Fix available
8.1 High
-
apache http server
Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling
CVE-2026-63718
Fix available
7.5 High
-
apache http server
Apache HTTP Server: mod_vhost_alias stack overflow
CVE-2026-63292
Public exploitFix available
7.5 High
-
apache http server
Apache HTTP Server: mod_proxy_ftp PASV address handling
CVE-2026-63045
Fix available
7.5 High
-
apache http server
Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function
CVE-2026-59797
Fix available
9.8 Critical
-
apache http server
Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM
CVE-2026-59685
Fix available
7.5 High
-
apache http server
Apache HTTP Server: mod_dav_fs property database read access
CVE-2026-58415
Fix available
5.3 Medium
-
apache http server
Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy
CVE-2026-57941
Fix available
9.8 Critical
-
apache http server
Apache HTTP Server: mod_proxy_html: crash in dump_content
CVE-2026-56449
Fix available
7.5 High
-
apache http server
Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}
CVE-2026-56154
Fix available
9.8 Critical
-
apache http server
Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char
CVE-2026-56153
Fix available
7.5 High
-
apache http server
Apache HTTP Server: mod_auth_digest reauthentication attack
CVE-2026-48005
Fix available
7.5 High
-
apache http server
Apache HTTP Server: mod_session: Session cookie not removed during internal redirect
CVE-2026-47360
Fix available
7.5 High
-
apache http server
Apache HTTP Server: mod_heartmonitor denial of service
CVE-2026-46729
Fix available
7.5 High
-
apache http server
Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories
CVE-2026-42356
Fix available
3.7 Low
-
apache http server
Apache HTTP Server: mod_dav shared lock overflow
CVE-2026-42528
Fix available
4.3 Medium
-
apache wss4j
Apache WSS4J: Unauthenticated denial of service via integer overflow in DER parsing of X.509 certificate extensions
CVE-2026-95616
7.5 High
-
apache wss4j
Apache WSS4J: UsernameToken replay protection bypassed by re-encoding the Nonce
CVE-2026-92899
4.8 Medium
- Show olderLoading…