Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache syncopeApache Syncope: SQL injection vulnerability in Audit Events searchCVE-2026-573089.8 Critical
- apache syncopeApache Syncope: Remote Code Execution via Scripted ConnectorCVE-2026-534219.8 Critical
- apache syncopeApache Syncope: Remote Code Execution via Flowable BPMN Groovy ScriptTaskCVE-2026-534059.8 Critical
- apache syncopeApache Syncope: RCE via Groovy Sandbox bypassCVE-2026-630719.8 Critical
- apache traffic serverApache Traffic Server: DoS vulnerability in HTTP/2 via stalled flow-control conditionsCVE-2026-591737.5 High
- apache accumuloApache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissionsCVE-2026-627645.7 Medium
- apache ivyApache Ivy: PackagerResolver path traversal vulnerabilityCVE-2026-26032Fix available5.4 Medium
- apache fineractApache Fineract: Office list: SQL Injection via Subquery in orderByCVE-2026-57821Public exploit8.1 High
- apache fineractApache Fineract: SQL injection in runreports endpointCVE-2026-351528.8 High
- apache fineractApache Fineract: Boolean SQL Injection in Client Search API (orderBy parameter) leading to Local File DisclosureCVE-2026-562878.1 High
- apache openmeetingsApache OpenMeetings: Arbitrary File ReadCVE-2026-494886.5 Medium
- apache kylinApache Kylin: Improper authorization in job information retrievalCVE-2026-623934.3 Medium
- apache kylinApache Kylin: OS Command Injection via Async Query APICVE-2026-623929.8 Critical
- apache kylinApache Kylin: SQL Injection Vulnerability in Catalog Cache Refresh APICVE-2026-623909.8 Critical
- apache dorisApache Doris: Improper Authentication in Frontend HTTP APICVE-2026-583199.1 Critical
- apache tomcatApache Tomcat: EncryptInterceptor requirements not clearly documentedCVE-2026-59084Fix available9.1 Critical
- apache tomcatApache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypassCVE-2026-59083Fix available9.1 Critical
- apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 moreApache Airflow FAB provider: FAB auth manager: a DAG named "DAGs" hijacks the global all-DAGs permission (access_control privilege escalation via resource_name() collision)CVE-2026-592458.1 High
- apache apache-airflow-providers-git, apache software foundation airflow git provider +1 moreApache Airflow Git provider: Git provider hook defaults to StrictHostKeyChecking=no, disabling SSH host-key verificationCVE-2026-580658.1 High
- apache gravitinoApache Gravitino: URL path injection via unencoded user-supplied identifiers in MCP REST client f-string URL construction, enabling path traversal to unintended API endpoints.CVE-2026-41041Fix available9.1 Critical
- apache gravitinoApache Gravitino: Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIsCVE-2026-49876Fix available6.5 Medium
- apache log4j, apache software foundation log4j api +1 moreApache Log4j API: Improper serialization of non-finite floating-point values in MapMessage.asJson()CVE-2026-49844Public exploitFix available6.3 Medium
- apache helix, apache software foundation helix rest +1 moreApache Helix REST: Permissive CORS Configuration in REST API Allows Unrestricted Cross-OriginCVE-2026-571117.5 High
- apache airflowApache Airflow: DAG author RCE on webserver via unrestricted import_string() in BaseSerialization.deserialize()CVE-2026-33264Fix available9.8 Critical
- apache airflowApache Airflow: Task-instance API exposes secrets in deferred trigger kwargsCVE-2026-49487Fix available6.5 Medium
- apache airflowApache Airflow: Bulk JSON Variables bypass should_hide_value_for_key - redact() called without the keyCVE-2026-48828Fix available6.5 Medium
- apache airflowApache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}CVE-2026-49296Fix available6.5 Medium
- apache airflowApache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.targetCVE-2026-48891Fix available4.3 Medium
- apache airflowApache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic optionsCVE-2026-48892Fix available6.5 Medium
- apache opennlp, apache software foundation opennlp :: core :: ml :: libsvm +1 moreApache OpenNLP :: Core :: ML :: LibSVM: Unsafe Java Deserialization in SvmDoccatModelCVE-2026-43825EPSS 13.9%7.3 High
- apache apache-airflow-providers-google, apache software foundation airflow google provider +1 moreApache Airflow Google provider: Path traversal via GCS object names → local/SFTP filesystem (GCSToSFTPOperator + GCSTimeSpanFileTransformOperator)CVE-2026-49297Fix available8.1 High
- apache camelApache Camel: CouchDB: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted inputCVE-2026-46588Public exploitFix available7.3 High
- apache camelApache Camel: Couchbase: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted inputCVE-2026-46587Public exploitFix available7.3 High
- apache camelApache Camel: langchain4j-tools: filter tool argument headers against declared parametersCVE-2026-49042Public exploitFix available7.3 High
- apache iotdbApache IoTDB: Authentication Bypass via Forged SessionID in Thrift RPCCVE-2026-24013Fix available9.1 Critical
- apache iotdbApache IoTDB: Denial of Service via Resource Exhaustion in Aggregation QueryCVE-2026-24012Fix available7.5 High
- apache camelApache Camel, Apache Camel: Camel JMS - CVE-2026-40860 fix bypass via DefaultExchangeHolderCVE-2026-43866Public exploitFix available7.3 High
- apache iotdbApache IoTDB: Path Traversal in DataNode Internal RPC Trigger JAR Upload Allows Arbitrary File WriteCVE-2026-24014Fix available9.8 Critical
- apache camelApache Camel: Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilterCVE-2026-43867Public exploitFix available9.8 Critical
- apache camel, apache software foundation camel aws2 sns +1 moreApache Camel AWS2 SNS: An inbound Camel-namespace filter was added to Sns2HeaderFilterStrategy to align it with sibling componentsCVE-2026-56140Fix available9.8 Critical
- apache camel, apache software foundation camel undertow +1 moreApache Camel Undertow: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal informati…CVE-2026-56139Public exploitFix available5.3 Medium
- apache camel, apache software foundation camel iggy +1 moreApache Camel Iggy: The inbound consumer maps externally-supplied Iggy message user-headers into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling cont…CVE-2026-55994Public exploitFix available7.5 High
- apache camel, apache software foundation camel atmosphere websocket +1 moreApache Camel Atmosphere Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control header…CVE-2026-55993Public exploitFix available7.5 High
- apache camel, apache software foundation camel keycloak +1 moreApache Camel Keycloak: KeycloakSecurityPolicy verifies the bearer access token only inside its role and permission checks, so in the default configuration the token is never verified and any non-null…CVE-2026-53913Public exploitFix available9.8 Critical
- apache camelApache Camel: Camel-Netty-HTTP: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal…CVE-2026-49365Public exploitFix available5.3 Medium
- apache camel, apache software foundation camel salesforce +1 moreApache Camel Salesforce: Non-Camel-prefixed Exchange header constants bypass the HTTP header filter, allowing an HTTP client to influence internal behaviourCVE-2026-49099Public exploitFix available5.3 Medium
- apache camelApache Camel: Camel-Kafka: The kafka.OVERRIDE_TOPIC (and other kafka.*) Exchange header constants used non-Camel-prefixed names that bypass the upstream HTTP header filter, allowing an HTTP client to…CVE-2026-49098Public exploitFix available5.3 Medium
- apache camelApache Camel: Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to redirect outgoing IRC m…CVE-2026-49097Public exploitFix available6.5 Medium
- apache camel, apache software foundation camel dapr +1 moreApache Camel Dapr: Pub/Sub consumer copied the inbound CloudEvent's pub/sub-name and topic into producer-direction routing headers, allowing an actor who can publish to the subscribed topic to influen…CVE-2026-49086Public exploitFix available6.5 Medium
- apache camel, apache software foundation camel jira +1 moreApache Camel JIRA: A set of non-Camel-prefixed Exchange header constants bypass the HTTP header filter, allowing an HTTP client to drive arbitrary JIRA issue operations using the endpoint's configured…CVE-2026-48206Public exploitFix available5.3 Medium
- Show moreLoading…