[ Vendor · 458 CVEs ]
Apache Software Foundation
CVEs affecting Apache Software Foundation published in the last 30 days, plus any Apache Software Foundation CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-85314 | 19 Oct 2026 | CVSS 6.5 | Apache Software Foundation Apache CamelImproper Input Validation vulnerability in Apache Camel Mail component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… | |
| CVE-2026-85315 | 19 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache CamelGeneration of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC component. This issue affects Apache Camel: from… | |
| CVE-2026-85316 | 19 Oct 2026 | CVSS 4.8 | Apache Software Foundation Apache CamelInsufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before… | |
| CVE-2026-85249 | 19 Oct 2026 | CVSS 6.5 | Apache Software Foundation Apache CamelImproper Input Validation vulnerability in Apache Camel Tika component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… | |
| CVE-2026-85250 | 19 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache CamelImproper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component. This issue affects Apache Camel: from 4.0.0… | |
| CVE-2026-85251 | 19 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache CamelExposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0… | |
| CVE-2026-85254 | 19 Oct 2026 | CVSS 6.5 | Apache Software Foundation Apache CamelImproper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before… | |
| CVE-2026-85257 | 19 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache CamelGeneration of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component. This issue affects Apache Camel: from 4.0.0… | |
| CVE-2026-85260 | 19 Oct 2026 | CVSS 5.5 | Apache Software Foundation Apache CamelInsertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component. This issue affects Apache Camel: from 4.0.0 before… | |
| CVE-2026-84180 | 19 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache CamelGeneration of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from… | |
| CVE-2026-84181 | 19 Oct 2026 | CVSS 5.9 | Apache Software Foundation Apache CamelImproper Authentication vulnerability in Apache Camel Shiro component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… | |
| CVE-2026-85243 | 19 Oct 2026 | CVSS 5.9 | Apache Software Foundation Apache CamelImproper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.0 before… | |
| CVE-2026-85245 | 19 Oct 2026 | CVSS 5.9 | Apache Software Foundation Apache CamelExposure of Data Element to Wrong Session vulnerability in Apache Camel Thrift component. This issue affects Apache Camel: from 4.0.0 before 4.18.5… | |
| CVE-2026-85246 | 19 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache CamelGeneration of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component. This issue affects Apache Camel: from… | |
| CVE-2026-85247 | 19 Oct 2026 | CVSS 5.9 | Apache Software Foundation Apache CamelImproper Certificate Validation vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from… | |
| CVE-2026-85248 | 19 Oct 2026 | CVSS 5.9 | Apache Software Foundation Apache CamelConcurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Camel PQC component. This issue… | |
| CVE-2026-80312 | 19 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache CamelImproper Authentication vulnerability in Apache Camel OAuth component. This issue affects Apache Camel: from 4.11.0 before 4.18.5, from 4.19.0 before… | |
| CVE-2026-80343 | 19 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache CamelImproper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5… | |
| CVE-2026-80344 | 19 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache CamelServer-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from… | |
| CVE-2026-83531 | 19 Oct 2026 | CVSS 8.8 | Apache Software Foundation Apache CamelImproper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in an Expression Language Statement… | |
| CVE-2026-84176 | 19 Oct 2026 | CVSS 6.5 | Apache Software Foundation Apache CamelPermissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Vertx component. This issue affects Apache Camel… | |
| CVE-2026-84178 | 19 Oct 2026 | CVSS 6.1 | Apache Software Foundation Apache CamelCross-Site Request Forgery (CSRF) vulnerability in Apache Camel OAuth component. This issue affects Apache Camel: from 4.11.0 before 4.18.5, from… | |
| CVE-2026-79983 | 19 Oct 2026 | CVSS 7.4 | Apache Software Foundation Apache CamelImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component. This issue affects Apache… | |
| CVE-2026-79984 | 19 Oct 2026 | CVSS 7.4 | Apache Software Foundation Apache CamelImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Mina SFTP component. This issue affects… | |
| CVE-2026-79985 | 19 Oct 2026 | CVSS 7.4 | Apache Software Foundation Apache CamelImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel SMB component. This issue affects Apache… | |
| CVE-2026-79986 | 19 Oct 2026 | CVSS 7.4 | Apache Software Foundation Apache CamelImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Azure Files component. This issue… | |
| CVE-2026-78162 | 19 Oct 2026 | CVSS 10.0 | Apache Software Foundation Apache CamelDeserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… | |
| CVE-2026-78163 | 19 Oct 2026 | CVSS 5.9 | Apache Software Foundation Apache CamelServer-Side Request Forgery (SSRF), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') and Exposure of Sensitive… | |
| CVE-2026-78164 | 19 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache CamelImproper Neutralization of Special Elements Used in a Template Engine and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in… | |
| CVE-2026-78165 | 19 Oct 2026 | CVSS 8.8 | Apache Software Foundation Apache CamelDeserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5… | |
| CVE-2026-71253 | 19 Oct 2026 | CVSS 9.8 | Apache Software Foundation Apache JohnzonUse of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Johnzon. ClassConverter loads &… | |
| CVE-2026-79613 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache Answervulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could access comments associated with… | |
| CVE-2026-79620 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache AnswerExposure of sensitive information through data queries vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An improper… | |
| CVE-2026-79624 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache AnswerInsufficient session expiration vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Insufficient session invalidation… | |
| CVE-2026-79633 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache Answervulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Missing authorization checks allowed authenticated users to perform… | |
| CVE-2026-86589 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache AnswerIncorrect implementation of authentication algorithm vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. A flaw in the… | |
| CVE-2026-90910 | 19 Oct 2026 | CVSS 9.8 | Apache Software Foundation Apache AnswerMissing authentication for critical function vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The reaction API did… | |
| CVE-2026-64943 | 19 Oct 2026 | CVSS 8.1 | Apache Software Foundation Apache AnswerInsertion of Sensitive Information into Log File vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Full API keys are… | |
| CVE-2026-64944 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache AnswerImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Answer. This issue affects Apache… | |
| CVE-2026-64945 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache AnswerA vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The question operation controller gates hide/show operations on… | |
| CVE-2026-67249 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache AnswerA vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. A verification code issued for one email-based workflow could be… | |
| CVE-2026-68482 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache AnswerMissing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An unauthenticated or unauthorized user can… | |
| CVE-2026-71563 | 19 Oct 2026 | CVSS 4.3 | Apache Software Foundation Apache AnswerMissing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An authorization flaw in the MCP answer… | |
| CVE-2026-76994 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache AnswerExposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2… | |
| CVE-2026-108823 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinExposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache Kylin. The impact is minor unless job services are… | |
| CVE-2026-108833 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinDefault startup profile miss security settings in Apache Kylin. Any deployment has security setting profile turned on does not impact. This issue… | |
| CVE-2026-108837 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinAllocation of resources without limits or throttling vulnerability in Apache Kylin. Given an attacker has got project admin permission, an cache API… | |
| CVE-2026-108762 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinPath-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin services that are directly exposed to public… | |
| CVE-2026-108764 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinServer-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the kylin job service that are directly exposed to public network… | |
| CVE-2026-108766 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinMissing authorization on jdbc source config update in Apache Kylin. Impact most to the kylin services that are directly exposed to public network… | |
| CVE-2026-108771 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinMissing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin. Impact most to the kylin services that… | |
| CVE-2026-108776 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. The impact is moderate if kylin… | |
| CVE-2026-108780 | 19 Oct 2026 | Not scored yet | Apache Software Foundation Apache KylinPotential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin backend services are open to… | |
| CVE-2026-68572 | 16 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache KylinExposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4… | |
| CVE-2026-68573 | 16 Oct 2026 | CVSS 9.8 | Apache Software Foundation Apache KylinImproper Authentication vulnerability in Apache Kylin. Unauthenticated user may access to system cleanup actions. Impact most to the kylin services… | |
| CVE-2026-69076 | 16 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache KylinExposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public… | |
| CVE-2026-69077 | 16 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache KylinExposure of unauthorized cross-project job manipulation vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to… | |
| CVE-2026-69080 | 16 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache KylinExposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are… | |
| CVE-2026-108743 | 16 Oct 2026 | CVSS 8.8 | Apache Software Foundation Apache KylinImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin. Impact most to the kylin… | |
| CVE-2026-108709 | 16 Oct 2026 | CVSS 9.8 | Apache Software Foundation Apache KylinAuthentication bypass within in-house network in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which… | |
| CVE-2026-63618 | 16 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache KylinExposure of Sensitive Information (system level configuration info) to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache… | |
| CVE-2026-63619 | 16 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache KylinMissing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement. Impact… | |
| CVE-2026-64610 | 16 Oct 2026 | CVSS 9.8 | Apache Software Foundation Apache KylinDeserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external cache service. This… | |
| CVE-2026-64959 | 16 Oct 2026 | CVSS 9.8 | Apache Software Foundation Apache KylinImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical Function vulnerability in… | |
| CVE-2026-68571 | 16 Oct 2026 | CVSS 8.8 | Apache Software Foundation Apache KylinImproper Control of Generation of Code ('Code Injection') vulnerability in Apache Kylin. Special parameter in JDBC URL can lead to code injection… | |
| CVE-2026-96806 | 15 Oct 2026 | CVSS 5.8 | Apache Software Foundation Apache Airflow Keycloak providerThe Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but `KeycloakJWTMiddleware`… | |
| CVE-2026-94134 | 15 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache Airflow SSH providerThe Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key` is configured or `no_host_key_check` is… | |
| CVE-2026-94135 | 15 Oct 2026 | CVSS 4.3 | Apache Software Foundation Apache Airflow SFTP providerThe Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, `SFTPClientPool`) disable SSH host-key verification by… | |
| CVE-2026-92228 | 15 Oct 2026 | CVSS 6.5 | Apache Software Foundation Apache Airflow Keycloak providerThe Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted every team role global read access to audit logs… | |
| CVE-2026-107460 | 13 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache Fesod (Incubating)Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be… | |
| CVE-2026-92116 | 12 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache AlluraOAuth1 callback validation vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to… | |
| CVE-2026-92119 | 12 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache AlluraREST API Mass Assignment vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to… | |
| CVE-2026-92120 | 12 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache AlluraOAuth1 Request Replay Attack vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to… | |
| CVE-2026-85499 | 12 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache SkyWalking BanyanDBImproper Authorization vulnerability in Apache SkyWalking BanyanDB. The Canopy includes incomplete proof-of-concept role and monitoring-proxy… | |
| CVE-2026-103636 | 10 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache DataSketchesOut-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp). var_opt_union::deserialize() read the… | |
| CVE-2026-103513 | 10 Oct 2026 | CVSS 9.8 | Apache Software Foundation Apache DataSketchesOut-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). A crafted serialized CPC sketch… | |
| CVE-2026-103635 | 10 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache DataSketchesOut-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp)… | |
| CVE-2026-103501 | 10 Oct 2026 | CVSS 9.8 | Apache Software Foundation Apache DataSketchesHeap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). When deserializing a sketch in LIST mode… | |
| CVE-2026-103412 | 9 Oct 2026 | CVSS 8.8 | Apache Software Foundation Apache Camel KaravanImproper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan. A project file name supplied… | |
| CVE-2026-103413 | 9 Oct 2026 | CVSS 8.8 | Apache Software Foundation Apache Camel KaravanImproper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's `kubernetes.yaml`… | |
| CVE-2026-79650 | 9 Oct 2026 | CVSS 6.1 | Apache Software Foundation Apache CXFApache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication. The issue occurs… | |
| CVE-2026-86463 | 9 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache CXFApache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions. The search pattern can get stuck trying… | |
| CVE-2026-97468 | 9 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache CXFApache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token… | |
| CVE-2026-97791 | 9 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache CXFIn Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS. That… | |
| CVE-2026-107937 | 9 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache CXFIn Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size (default 300… | |
| CVE-2026-107938 | 9 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache CXFIn Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS… | |
| CVE-2026-108039 | 9 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache CXFBy default, StaxUtils placed no limit on the total number of elements or the total number of characters in an XML document. A very large request… | |
| CVE-2026-71575 | 9 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache CXFThe max_age authentication-freshness check in OidcClientCodeRequestFilter was inoperative due to a milliseconds/seconds unit mismatch and an inverted… | |
| CVE-2026-73179 | 9 Oct 2026 | CVSS 8.1 | Apache Software Foundation Apache CXFImproper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote… | |
| CVE-2026-78384 | 9 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache CXFCompressionUtils.inflate() decompressed attacker-controlled DEFLATE data with no output-size cap. A small (~KB) crafted payload could expand to… | |
| CVE-2026-100227 | 9 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache CXFImproper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module. The JAX-RS XML Signature interceptors… | |
| CVE-2026-71183 | 8 Oct 2026 | CVSS 7.1 | Apache Software Foundation Apache DolphinSchedulerAn authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain information about data sources they are not authorized… | |
| CVE-2026-71895 | 8 Oct 2026 | CVSS 7.1 | Apache Software Foundation Apache DolphinSchedulerAn authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes configuration data intended for… | |
| CVE-2026-71896 | 8 Oct 2026 | CVSS 6.5 | Apache Software Foundation Apache DolphinSchedulerAn authorization vulnerability in Apache DolphinScheduler allows authenticated users to retrieve other users' account information through the… | |
| CVE-2026-66082 | 8 Oct 2026 | CVSS 6.5 | Apache Software Foundation Apache DolphinSchedulerAn authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to perform unauthorized operations on workflow schedules… | |
| CVE-2026-66084 | 8 Oct 2026 | CVSS 8.1 | Apache Software Foundation Apache DolphinSchedulerAn authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to modify task definitions in projects they are not… | |
| CVE-2026-66087 | 8 Oct 2026 | CVSS 8.1 | Apache Software Foundation Apache DolphinSchedulerAn authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to operate task instance in projects they are not… | |
| CVE-2026-103371 | 7 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache GeodeInsertion of Sensitive Information into Log File in Apache Geode Web Management. This issue affects Apache Geode: from 2.0.0 before 2.0.3. Users are… | |
| CVE-2026-92415 | 7 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache Jackrabbit— Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Davex client. A malicious WebDAV/DavEx… | |
| CVE-2026-92414 | 7 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache Jackrabbit: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session… |
Page 2 of 5