Apache vulnerabilities
3,063 CVEs and advisories name Apache as an affected vendor, 33 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-49506Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack
- CVE-2026-32327Apache Portable Runtime Utility: apr-util XML stack recursion crash
- CVE-2026-34191Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle
- CVE-2026-34501Apache Portable Runtime Utility: Heap buffer overflow in APR redis client
- CVE-2026-34502Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client
- CVE-2026-57818Apache CXF: OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProvider
- CVE-2026-61466Apache CXF: OAuth2 Dynamic Client Registration Scope Self-Escalation
- CVE-2026-63687Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters
- CVE-2026-65583Apache CXF: Self-issued ID token claims validation skipped
- CVE-2026-68079Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replay
- CVE-2026-68481Apache CXF: Revocation bypass in DefaultEncryptingOAuthDataProvider
- CVE-2026-65432Apache CXF: XXE via WSDL/XSD import parsing
- CVE-2026-57817Apache CXF: The authorization code hash (c_hash) is not enforced for the hybrid OIDC flow
- CVE-2026-66909Apache CXF: Unsafe deserialization of inbound JMS ObjectMessage
- CVE-2026-64958Apache CXF: Denial of service via message header attachments
- CVE-2026-57819Apache CXF: No default restriction on the amount of form parameters per message
- CVE-2026-54225Apache CXF: Denial of Service attack via large attachments
- CVE-2026-64640Apache Polaris: register endpoint reads attacker-controlled storage location before allowed-locations validation
- CVE-2026-60053Apache Answer: Residual Administrative API Key Access After Role or Account Revocation
- CVE-2026-60023Apache Answer: Unauthorized disclosure of deleted or pending answer content
- CVE-2026-50749Apache Answer: Missing authorization in revision audit reject allows authenticated users to reject pending revisions
- CVE-2026-48912Apache Answer: Improper authorization in avatar update cleanup allows authenticated users to delete arbitrary uploaded files by URL
- CVE-2026-48911Apache Answer: Unauthenticated OAuth Email-Binding Account Takeover via Existing User Confirmation Flow
- CVE-2026-48834Apache Answer: Denial of service via crafted Accept-Language header parsing
- CVE-2026-61486Apache Lucy: stack-buffer-overflow in JSON parser error reporter on malformed input
- CVE-2026-61484Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS
- CVE-2026-61483Apache Lucy: QueryParser unbounded recursion on deeply-nested query -> C-stack-overflow DoS
- CVE-2026-68080Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of service
- CVE-2026-67592Apache Qpid ProtonJ2: Unable to govern the maximum number of transfer frames per incoming delivery
- CVE-2026-67555Apache Qpid Proton Dotnet: Unable to govern the maximum number of transfer frames per incoming delivery