Apache vulnerabilities
3,063 CVEs and advisories name Apache as an affected vendor, 33 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-105937Apache Pulsar: Missing authorization of the shadow topic source allows cross-tenant message disclosure and deletion of source topic data
- CVE-2026-105936Apache Pulsar: Functions connectors list endpoint does not apply the super-user check of the worker connectors endpoint
- CVE-2026-105935Apache Pulsar: Function trigger publishes to the input topic without checking the caller's produce permission
- CVE-2026-105934Apache Pulsar: Missing tenant admin authorization check when truncating a partitioned topic
- CVE-2026-105933Apache Pulsar: Namespace encryption requirement not enforced after a failure during topic initialization
- CVE-2026-105932Apache Pulsar: Missing topic policy authorization on non-persistent topic entry filter endpoints
- CVE-2026-105931Apache Pulsar: Missing authorization on transaction admin endpoints exposes transaction coordinator and transaction statistics of other…
- CVE-2026-105930Apache Pulsar: Improper Authorization of Function, Source and Sink Package URLs Allows Cross-Tenant Package Download
- CVE-2026-105927Apache Pulsar: Improper authorization of WebSocket consumer dead letter topic allows writes without PRODUCE permission
- CVE-2026-105926Apache Pulsar: Missing Topic Authorization on Binary Protocol GetSchema and GetOrCreateSchema Commands
- CVE-2026-105869Apache Pulsar: MultiRolesTokenAuthorizationProvider uses roles from unverified tokens for HTTP requests that fall back to the anonymous…
- CVE-2026-90484Apache bRPC: Null pointer dereference in MySQL reply parser leading to client crash
- CVE-2026-87849Apache bRPC: Out-of-bounds read via non-object fields in Discovery naming-service reply parsing
- CVE-2026-86249Apache bRPC: Authentication bypass when a server sets ServerOptions.internal_port and ServerOptions.auth
- CVE-2026-86147Apache bRPC: Arbitrary file creation/truncation via /flags and unbounded profiling duration via /pprof
- CVE-2026-86146Apache bRPC: HTTP Request Smuggling and Header Injection via Lenient HTTP/1.1 Header Parsing
- CVE-2026-84748Apache bRPC: Builtin services reachable from the public port via protobuf protocols despite ServerOptions.internal_port configuration
- CVE-2026-84747Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path Segments
- CVE-2026-84727Apache bRPC: Use-After-Free in RTMP Chunk Stream Handling via Abort Message
- CVE-2026-82953Apache bRPC: NULL Pointer Dereference in RTMP createStream Error Path Leading to Remote Denial of Service
- CVE-2026-82942Apache bRPC: Race Condition on the Shared Socket Input Buffer in the RDMA Transport Causes Remote Denial of Service
- CVE-2026-82425Apache bRPC: Reachable Assertion in Socket::OnInputEvent Allows Remote Denial of Service
- CVE-2026-82231Apache bRPC: Malformed Thrift T_EXCEPTION reply causes process termination in Thrift client
- CVE-2026-82230Apache bRPC: Stack Exhaustion via Unbounded Recursion in mcpack2pb Parser
- CVE-2026-82210Apache bRPC: Remote denial of service (crash) via malformed stream feedback frames
- CVE-2026-81755Apache bRPC: Uncontrolled Resource Consumption via Excessive Streams in a Single RPC Request
- CVE-2026-80463Apache bRPC: Unbounded Memory Accumulation in Stream Message Reassembly
- CVE-2026-79704Apache bRPC: Out-of-bounds Read in Multi-stream RPC Response Handling
- CVE-2026-78334Apache bRPC: Missing Authentication for Streaming RPC Frames
- CVE-2026-78066Apache bRPC: Resource Exhaustion via Unbounded Decompression and Unvalidated Wire-Declared Sizes