Apache Latest Vulnerabilities
Latest vulnerabilities published by apache
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Cleartext Transmission Vulnerability in Apache APISIX by Apache
CVE-2026-31923ApacheApache Apisix7.5HIGHPath Traversal Vulnerability in Apache PDFBox by Apache
CVE-2026-33929ApacheApache PDFbox Examples4.3MEDIUMCleartext Transmission Vulnerability in Apache APISIX by Apache
CVE-2026-31924ApacheApache Apisix5.3MEDIUMHeader Injection Vulnerability in Apache APISIX by Apache Software Foundation
CVE-2026-31908ApacheApache ApisixArbitrary Code Execution in Apache Airflow by Authorized Users
CVE-2026-33858ApacheApache Airflow8.8HIGHSecurity Oversights in Apache Airflow Deployment Management
CVE-2025-66236ApacheApache AirflowServer-Side Request Forgery Vulnerability in Apache SkyWalking MCP
CVE-2026-34476ApacheApache Skywalking Mcp7.1HIGHDeserialization Vulnerability in Apache Storm by Apache
CVE-2026-35337ApacheApache Storm Client8.8HIGHStored Cross-Site Scripting Vulnerability in Apache Storm UI
CVE-2026-35565ApacheApache Storm Ui5.4MEDIUMXML Parsing Issue in Apache Log4cxx Affects Log Integrity
CVE-2026-40023ApacheApache Log4cxx6.3MEDIUMXML Layout Vulnerability in Apache Log4net Affects Logging Functionality
CVE-2026-40021ApacheApache Log4net6.3MEDIUMApache Log4j JSON Template Layout Vulnerability in Log Management Software
CVE-2026-34481ApacheApache Log4j Json Temp...6.3MEDIUMXML Layout Vulnerability in Apache Log4j Core by Apache
CVE-2026-34480ApacheApache Log4j Core6.9MEDIUMXML Processing Flaw in Apache Log4j 1-to-Log4j 2 Bridge
CVE-2026-34479ApacheApache Log4j 1 To Log4...6.9MEDIUMLog Injection Vulnerability in Apache Log4j Core Product
CVE-2026-34478ApacheApache Log4j Core6.9MEDIUMVulnerability in Apache Log4j Core SSL Configuration Exposes Applications to Man-in-the-Middle Attacks
CVE-2026-34477ApacheApache Log4j Core6.3MEDIUMMemory Exhaustion in Apache ActiveMQ Products Due to TLSv1.3 Handshake Issues
CVE-2026-39304ApacheApache ActiveMQ Client7.5HIGHImproper Client Certificate Authentication in Apache Tomcat
CVE-2026-34500ApacheApache Tomcat6.5MEDIUMSensitive Information Exposure in Apache Tomcat Clustering Component
CVE-2026-34487ApacheApache Tomcat7.5HIGHMissing Encryption of Sensitive Data Vulnerability in Apache Tomcat
CVE-2026-34486ApacheApache Tomcat7.5HIGHImproper Output Encoding in Apache Tomcat Affects Multiple Versions
CVE-2026-34483ApacheApache Tomcat7.5HIGHImproper Input Validation in Apache Tomcat Affects Multiple Versions
CVE-2026-32990ApacheApache Tomcat5.3MEDIUMPadding Oracle Vulnerability in Apache Tomcat by the Apache Software Foundation
CVE-2026-29146ApacheApache Tomcat7.5HIGHAuthentication Flaw in Apache Tomcat and Tomcat Native Software
CVE-2026-29145ApacheApache Tomcat9.1CRITICALCipher Preference Order Vulnerability in Apache Tomcat by Apache
CVE-2026-29129ApacheApache Tomcat7.5HIGH