Apache vulnerabilities
3,063 CVEs and advisories name Apache as an affected vendor, 33 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-78243Apache YuniKorn: LDAP Group provider panics on lowercase attribute name
- CVE-2026-92393Apache YuniKorn: Admission control bypass via workload UPDATE operation
- CVE-2026-93684Apache Impala: Stored XSS in Impala query plans
- CVE-2026-90466Apache Impala: Path traversal executes JARs outside trusted paths
- CVE-2026-97720Apache Impala: Impala Executor Webserver Auth Bypass
- CVE-2026-105244Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content
- CVE-2026-105243Apache log4net: Oversize EventLogAppender record silently discarded
- CVE-2026-105242Apache log4net: Request validation failure drops the event in the aspnet-request converter
- CVE-2026-105241Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch
- CVE-2026-105240Apache log4net: NUL character truncates OutputDebugStringAppender records
- CVE-2026-105239Apache log4net: NUL character truncates EventLogAppender records
- CVE-2026-105111Apache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSS
- CVE-2026-94114Apache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoning
- CVE-2026-104714Apache Struts: Shared message formatter exposes date and time values across concurrent requests
- CVE-2026-104713Apache Struts: Unbounded request body read in the REST plugin
- CVE-2026-104712Apache Struts: Disproportionate response size when rendering BigDecimal request parameters
- CVE-2026-104711Apache Struts: OGNL injection in the legacy RESTful action mapper
- CVE-2026-102795Apache Traffic Server: SNI to Host header matching policy is not properly enforced
- CVE-2026-59265Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover
- CVE-2026-66054Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize
- CVE-2026-61374Apache Thrift: Java TSaslTransport post-auth data-frame missing size limit
- CVE-2026-63772Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count
- CVE-2026-66055Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language)
- CVE-2026-66081Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages
- CVE-2026-66331Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize
- CVE-2026-66837Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length
- CVE-2026-66858Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml)
- CVE-2026-66859Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route
- CVE-2026-83632Apache Thrift: C++ THttpTransport grows its line buffer without bound
- CVE-2026-83663Apache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go)