Skip to contentApache Software Foundation vulnerabilities
Products
Show 140 moreShow less
Newest
- apache polarisApache Polaris: staged table creation could vend storage credentials for unvalidated locationsCVE-2026-42809Fix available9.4 Critical
- apache polarisApache Polaris: No protection on `write.metadata.path`CVE-2026-42812Fix available9.4 Critical
- apache atlasApache Atlas: Script injection allows access to unintended dataCVE-2026-40563Fix available8.1 High
- apache http serverApache HTTP Server: mod_dav_lock indirect lock crashCVE-2026-29169Fix available7.5 High
- apache http server, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreApache HTTP Server: http2: double free and possible RCE on early resetCVE-2026-23918Public exploitFix availableEPSS 49.7%8.8 High
- apache http serverApache HTTP Server: mod_auth_digest timing attackCVE-2026-33006Public exploitFix available4.8 Medium
- apache http serverApache HTTP Server: mod_authn_socache crashCVE-2026-33007Fix available5.3 Medium
- apache http serverApache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status lineCVE-2026-33523Fix available6.5 Medium
- apache http serverApache HTTP Server: Off-by-one OOB reads in AJP getter functionsCVE-2026-33857Fix available5.3 Medium
- apache http serverApache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)CVE-2026-34032Fix available5.3 Medium
- apache http serverApache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()CVE-2026-34059Fix available7.5 High
- apache http serverApache HTTP Server: mod_rewrite elevation of privileges via ap_exprCVE-2026-24072Public exploitFix available8.8 High
- apache minaApache MINA: CWE-502 Deserialization of Untrusted Data (take 2)CVE-2026-42778Public exploitFix available9.8 Critical
- apache minaApache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (take 2)CVE-2026-42779Public exploitFix available9.8 Critical
- apache neethiApache Neethi: Unrestricted HTTP Redirect Following in Policy ReferencesCVE-2026-42404Fix available6.5 Medium
- apache neethiApache Neethi: Policy Normalization Unbounded Resource Allocation DoSCVE-2026-42402Fix available7.5 High
- apache neethiApache Neethi: Circular Policy Reference Infinite LoopCVE-2026-42403Fix available7.5 High
- apache airflow, apache software foundation airflow providers smtp +1 moreApache Airflow Providers SMTP: No certificate validation on SMTP STARTTLS connections in SMTP providerCVE-2026-41016Fix available5.9 Medium
- apache pony mailPony Mail: Admin account takeover via request smugglingCVE-2026-418739.8 Critical
- apache thriftApache Thrift: Node.js skip() recursionCVE-2026-41636Fix available8.7 High
- apache thrift, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +12 more +14 moreApache Thrift: C++ JSON OOB readCVE-2026-41607Fix available6.5 Medium
- apache thrift, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +12 more +14 moreApache Thrift: c_glib dispatch stack overflowCVE-2026-41606Fix available5.3 Medium
- apache thrift, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +12 more +14 moreApache Thrift: Swift Compact Protocol integer overflowCVE-2026-41605Fix available7.3 High
- apache thrift, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +12 more +14 moreApache Thrift: Swift Range crash in skip()CVE-2026-41604Fix available8.2 High
- apache thrift, red hat multicluster global hub, multicluster global hub 1.3.4 +17 more +19 moreApache Thrift: Go TFramedTransport uint32 overflowCVE-2026-41602Fix available7.5 High
- apache thrift, red hat cryostat 4 on rhel 9, multicluster global hub +16 more +18 moreApache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.CVE-2025-48431Fix available7.5 High
- apache storm prometheus reporterApache Storm Prometheus Reporter: Disabling TLS verification for Prometheus Reporter also disables it for all other connectionsCVE-2026-40557Fix available4.8 Medium
- apache storm, apache software foundation storm client +1 moreApache Storm Client: Anonymous principal assigned on TLS client certificate verification failureCVE-2026-41081Fix available6.5 Medium
- apache camel, red hat build of apache camel for spring boot 4, fuse 7 +2 more +4 moreApache Camel: Unsafe Java deserialization in camel-consul ConsulRegistry allows arbitrary code execution via malicious values read from the Consul KV storeCVE-2026-27172Public exploitFix available8.8 High
- apache camel, red hat build of apache camel 4.18.1 for spring boot 3.5.14, fuse 7 +2 more +4 moreApache Camel: CoAP URI Query Parameter to Exchange Header Injection in camel-coap Allows Single-Packet Pre-Auth Remote Code ExecutionCVE-2026-33453Public exploitFix available10.0 Critical
- apache camel, red hat build of apache camel - hawtio 4, build of apache camel 4 for quarkus 3 +8 more +10 moreApache Camel: Inbound Header Filter Missing in MailHeaderFilterStrategy Allows Remote Code Execution via MIME Header Injection (CVE-2025-30177 Variant)CVE-2026-33454Public exploitFix available9.4 Critical
- apache camel, apache software foundation camel platform http main, red hat openshift serverless +7 more +9 moreApache Camel Platform HTTP Main: Authentication Bypass on Non-Root Context Paths in camel main runtimeCVE-2026-40022Public exploitFix available8.2 High
- apache camel, red hat build of apache camel 4 for quarkus 3, build of apache camel 4.18 for quarkus 3.33 +4 more +6 moreApache Camel: Camel-Infinispan: Unsafe Deserialization in Remote Aggregation RepositoryCVE-2026-40858Public exploitFix available8.8 High
- apache minaApache MINA: CWE-502 Deserialization of Untrusted DataCVE-2026-41409Fix available9.8 Critical
- apache minaApache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCECVE-2026-41635Fix available9.8 Critical
- apache camel, apache software foundation camel coap, camel google pubsub +10 more +12 moreApache Camel JMS, Apache Camel CoAP, Apache Camel Google PubSub: Incomplete fix for CVE-2025-27636 in non-HTTP HeaderFilterStrategies (camel-jms, camel-sjms, camel-coap, camel-google-pubsub) allows ca…CVE-2026-40453Public exploitFix available9.9 Critical
- apache camel, red hat build of apache camel 4 for quarkus 3, build of apache camel 4.18 for quarkus 3.33 +4 more +6 moreApache Camel: Unsafe Deserialization of JMS ObjectMessage in camel-jms, camel-sjms, camel-sjms2 and camel-amqpCVE-2026-40860Public exploitFix available9.8 Critical
- apache camel, apache software foundation camel pqc, red hat build of apache camel for spring boot 4 +2 moreApache Camel PQC: Unsafe Deserialization from FileBasedKeyLifecycleManagerCVE-2026-40048Public exploitFix available7.8 High
- apache camel, apache software foundation camel mina, red hat build of apache camel for spring boot 4 +1 more +3 moreApache Camel Mina: Unsafe Deserialization in MinaConverter.toObjectInput() via TCP/UDPCVE-2026-40473Public exploitFix available8.8 High
- apache airflowApache Airflow: Dags endpoint might provide access to otherwise inaccessible entitiesCVE-2026-38743Fix available4.3 Medium
- apache airflowApache Airflow: Assets graph view bypasses DAG level access control displaying unrelated topologies and all DAGs names to unauthorized usersCVE-2026-40690Fix available4.3 Medium
- apache dolphinschedulerApache DolphinScheduler: Users are able to use tenants that are not defined on the platform during workflow execution.CVE-2026-23902Fix available8.1 High
- apache dolphinschedulerApache DolphinScheduler: Deserialization of untrusted data in RPCCVE-2025-62233Fix available6.3 Medium
- apache activemq, activemq broker, apache software foundation activemq all +8 more +10 moreApache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All: Authenticated user can perform RCE via DestinationView MBean exposed by JolokiaCVE-2026-41044Public exploitFix available8.8 High
- apache activemq, activemq web +1 moreApache ActiveMQ, Apache ActiveMQ Web: ActiveMQ Web Console - XSS vulnerability when browsing queuesCVE-2026-41043Fix available6.5 Medium
- apache activemq, activemq broker, apache software foundation activemq all +8 more +10 moreApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Possible bypass of CVE-2026-34197 via HTTP discovery second-stage URICVE-2026-40466Fix available8.8 High
- apache httpclient, red hat cryostat 4, migration toolkit for applications 8 +45 more +47 moreApache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verificationCVE-2026-40542Fix available7.3 High
- apache kafka, red hat openshift serverless, build of apache camel 4 for quarkus 3 +16 more +18 moreApache Kafka: Missing JWT token validation in OAUTHBEARER authenticationCVE-2026-33557Fix available9.1 Critical
- apache doris mcp serverApache Doris MCP Server: MCP SQL injectCVE-2025-66335Fix available5.3 Medium
- apache kafka, apache software foundation kafka clients +1 moreApache Kafka, Apache Kafka Clients: Information Exposure Through Network Client Log OutputCVE-2026-33558Fix available5.3 Medium
- Show moreLoading…