Skip to contentApache Software Foundation vulnerabilities
Products
Show 140 moreShow less
Newest
- apache apisixApache APISIX: Openid-connect plugin Identity Header SpoofingCVE-2026-44087Fix available5.3 Medium
- apache apisixApache APISIX: authz-casdoor incorrect session sharingCVE-2026-47339Fix available5.3 Medium
- apache apisixApache APISIX: wolf-rbac plugin Identity SpoofingCVE-2026-44046Fix available2.3 Low
- apache apisixApache APISIX: JWT Algorithm Confusion allows authentication bypassCVE-2026-39999Fix available7.0 High
- apache apisixApache APISIX: Identity Injection via forward-auth Plugin Missing Header CleanupCVE-2026-39998Fix available5.8 Medium
- apache shiroApache Shiro: LDAP DN Injection in DefaultLdapRealmCVE-2026-49268Public exploitFix available8.8 High
- apache dolphinschedulerApache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access.CVE-2026-47340Fix available6.5 Medium
- apache dolphinschedulerApache DolphinScheduler: The `/v2` experimental interface lacks permission checksCVE-2026-32967Fix available9.1 Critical
- apache dolphinschedulerApache DolphinScheduler: Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access.CVE-2026-42357Fix available6.5 Medium
- apache dolphinschedulerApache DolphinScheduler: Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projectsCVE-2026-41280Fix available4.9 Medium
- apache dolphinschedulerApache DolphinScheduler: DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata DisclosureCVE-2026-32966Fix available9.8 Critical
- apache apache-airflow-providers-sftp, apache software foundation airflow sftp provider +1 moreApache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory allows local file write outside the destination directory via malicious server-supplied directory-entry namesCVE-2026-50203Fix available9.1 Critical
- apache cxfApache CXF: No restriction on attachment headers per messageCVE-2026-50645Fix available7.5 High
- apache cxfApache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entryCVE-2026-50634Fix available6.5 Medium
- apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +3 more +5 moreApache CXF: JNDI Injection vulnerability in DispatchMDBMessageListenerImplCVE-2026-50633Fix available8.1 High
- apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +8 more +10 moreApache CXF: JNDI Injection Vulnerability in JMSConfigFactoryCVE-2026-50632Fix available8.1 High
- apache cxfApache CXF: OAuth2: TOCTOU Race Condition in Refresh Token ProcessingCVE-2026-50631Fix available7.4 High
- apache cxfApache CXF: OAuth2: HTTP Response Splitting via WWW-Authenticate Realm InjectionCVE-2026-50630Fix available6.5 Medium
- apache cxfApache CXF: OAuth2: Log Injection via Unsanitized Client IdentifierCVE-2026-50629Fix available5.3 Medium
- apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +5 more +7 moreApache CXF: OAuth2: Inverted IP Binding Check Defeats Security ControlCVE-2026-50628Fix available9.8 Critical
- apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +5 more +7 moreApache CXF: OAuth2: Missing JWT Audience and Issuer Validation in Access Token ValidatorCVE-2026-50627Fix available9.1 Critical
- apache cxf, red hat build of apache camel 4 for quarkus 3, build of apache camel 4.18 for quarkus 3.33 +12 more +14 moreApache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtilsCVE-2026-49875Fix available9.8 Critical
- apache cxfApache CXF: Authentication Bypass in OAuth2 TokenIntrospectionServiceCVE-2026-50623Fix available4.8 Medium
- apache ofbizApache OFBiz: Privilege Escalation via updateOrRemove Authorization BypassCVE-2026-473428.8 High
- apache ofbizApache OFBiz: DataResource Low-Privileged Authenticated FreeMarker Template Injection Leads to Remote Code ExecutionCVE-2026-502238.8 High
- apache answerApache Answer: AdminToken not invalidated after admin deactivationCVE-2026-25700Fix available7.2 High
- apache apache-airflow-providers-samba, apache software foundation airflow samba provider +1 moreApache Airflow Samba provider: Path traversal in GCSToSambaOperator via GCS object namesCVE-2026-49818Fix available6.5 Medium
- apache answerApache Answer: Unlisted Questions Accessible via Direct API AccessCVE-2026-34905Fix available6.5 Medium
- apache answerApache Answer: HTML Content Injection in EmailCVE-2026-34033Fix available5.4 Medium
- apache answerApache Answer: The custom avatar was not properly validatedCVE-2026-34031Fix available6.5 Medium
- apache answerApache Answer: Uploading specially crafted TIFF files causes an Out-of-Memory errorCVE-2026-33582Fix available6.5 Medium
- apache answerApache Answer: Authorization Bypass in Timeline APICVE-2026-25699Fix available6.1 Medium
- apache answerApache Answer: XSS in AI Answer RenderingCVE-2026-25688Fix available6.1 Medium
- apache http serverApache HTTP Server: mod_http2 memory corruption when file handles exhaustedCVE-2026-48913Fix available7.3 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: mod_xml2enc heap overflowCVE-2026-42536Public exploitFix available7.5 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`CVE-2026-44185Fix available7.3 High
- apache http server, red hat jboss core services for rhel 8, enterprise linux 10 +10 more +12 moreApache HTTP Server: mod_proxy_html buffer overflowCVE-2026-34355Fix available7.5 High
- apache http serverApache HTTP Server: Heap Underflow in `ap_regname` via Signed Char OverflowCVE-2026-44631Fix available9.8 Critical
- apache http serverApache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modulesCVE-2026-44119Fix available5.5 Medium
- apache http serverApache HTTP Server: OOB Read in `merge_response_headers` can cause crashCVE-2026-43951Fix available6.5 Medium
- apache http serverApache HTTP Server: mod_dav_fs protected directory accessCVE-2026-42535Fix available9.1 Critical
- apache http serverApache HTTP Server: ProxyPassReverseCookieMap buffer overflowCVE-2026-34356Fix available7.5 High
- apache http serverApache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftpCVE-2026-44186Fix available7.3 High
- apache http serverApache HTTP Server: mod_proxy_ftp XSSCVE-2026-29170Fix available6.1 Medium
- apache http serverApache HTTP Server: mod_ldap per-dir use-after-freeCVE-2026-29167Fix available9.8 Critical
- apache software foundation cordova plugin inappbrowser, apache cordova inappbrowser +1 moreCordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViewsCVE-2026-47430Fix available9.5 Critical
- apache foryApache Fory: Java ReplaceResolverSerializer deserialization checks bypassCVE-2026-50076Fix available9.1 Critical
- apache minaApache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232CVE-2026-47065Fix available9.8 Critical
- apache http server, debian linux, red hat jboss core services for rhel 8 +19 more +21 moreApache HTTP Server: mod_http2 denial of serviceCVE-2026-49975Public exploitFix availableEPSS 33.0%7.5 High
- apache calciteApache Calcite: A user-controled model can load arbitrary classes, leading to code executionCVE-2026-46718Fix available6.5 Medium
- Show moreLoading…