Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how apache compares to other vendors in security performance

View Risk Score →

Software

apache http server
135
apache tomcat
75
apache traffic server
53
apache airflow
42
apache activemq
32
apache camel
32
apache nifi
23
apache openoffice
23
apache solr
21
apache cxf
20
apache ofbiz
18
apache hadoop
16
apache struts
16
apache thrift
16
apache openmeetings
15
apache activemq all
14
apache activemq broker
14
apache fineract
14
apache dolphinscheduler
13
apache inlong
13
apache struts 2
13
apache superset
13
apache cloudstack
12
apache kafka
12
apache iotdb
11
apache geode
10
apache ambari
9
apache kylin
9
apache apache cxf
8
apache cassandra
8
apache guacamole
8
apache nimble
8
apache spark
8
apache apache camel
7
apache cordova
7
apache james
7
apache activemq artemis
6
apache apache thrift
6
apache apisix
6
apache archiva
6
apache artemis
6
apache batik
6
apache commons beanutils
6
apache commons compress
6
apache hive
6
apache linkis
6
apache neethi
6
apache tika
6
apache wicket
6
apache atlas
5

Apache NimBLEApache NimBLE: NULL pointer dereference vulnerability in SMP LTK request

Risk 46
Severity
7.5
First published (updated )
CVE-2026-45816

Apache NimBLEApache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handler

Risk 46
Severity
7.5
First published (updated )
CVE-2026-45815

Apache NimBLEApache NimBLE: Incorrect data validation in BASS add/modify source operation

Risk 83
Severity
8.8
First published (updated )
CVE-2026-45813

Apache NimBLEApache NimBLE: Buffer overflow in socket HCI transport

Risk 74
Severity
7.5
First published (updated )
CVE-2026-45811

Apache NeethiApache Neethi: Remote PolicyReference fetch lacks resource bounds

Risk 46
Severity
7.5
First published (updated )
CVE-2026-66144
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache NeethiApache Neethi: Missing global alternative-output budget across policy computation paths

Risk 46
Severity
7.5
First published (updated )
CVE-2026-66143

Apache NeethiApache Neethi: Uncontrolled recursion in policy processing

Risk 46
Severity
7.5
First published (updated )
CVE-2026-66142

Apache ForyApache Fory: Rust MetaString heap use-after-free

Risk 54
Severity
7.3
First published (updated )
CVE-2026-60080

Apache MINA SSHD sshd-gitApache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on Windows

Risk 51
Severity
7.1
First published (updated )
CVE-2026-56623

Apache MINA SSHDApache MINA SSHD: SSH certificate options lack validations

Risk 57
Severity
7.3
First published (updated )
CVE-2026-56624
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache MINA SSHDApache MINA SSHD: Path traversal in SCP file reception

Risk 46
Severity
7.5
First published (updated )
CVE-2026-56452

Apache SyncopeApache Syncope: Low-privileged authenticated SSRF in Connectors and Resources check

Risk 63
Severity
8.1
First published (updated )
CVE-2026-62418

Apache Traffic ServerApache Traffic Server: DoS vulnerability in HTTP/2 via stalled flow-control conditions

Risk 46
Severity
7.5
Trending
Month
First published (updated )
CVE-2026-59173

Apache FineractApache Fineract: Office list: SQL Injection via Subquery in orderBy

Risk 63
Severity
8.1
First published (updated )
CVE-2026-57821

Apache FineractApache Fineract: Boolean SQL Injection in Client Search API (orderBy parameter) leading to Local File Disclosure

Risk 63
Severity
8.1
First published (updated )
CVE-2026-56287
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache FineractApache Fineract: SQL injection in runreports endpoint

Risk 83
Severity
8.8
First published (updated )
CVE-2026-35152

Apache apache-airflow-providers-fabApache Airflow FAB provider: FAB auth manager: a DAG named "DAGs" hijacks the global all-DAGs permission (access_control privilege escalation via resource_name() collision)

Risk 63
Severity
8.1
First published (updated )
CVE-2026-59245

Apache Airflow Git providerApache Airflow Git provider: Git provider hook defaults to StrictHostKeyChecking=no, disabling SSH host-key verification

Risk 79
Severity
8.1
First published (updated )
CVE-2026-58065

Apache IoTDB C++ clientApache IoTDB C++ client: Out-of-bounds reads in C++ client TsBlock deserializer crash client process on malformed server data

Risk 46
Severity
7.5
First published (updated )
CVE-2026-40454

Apache IoTDBApache IoTDB: Authorization bypass in /rest/v2/fastLastQuery exposes last-value data to unauthorized authenticated users

Risk 46
Severity
7.5
First published (updated )
CVE-2026-40452
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache IoTDBApache IoTDB: Unauthenticated unbounded recursion in IoTDB AirGap receiver's E-language prefix parser causes per-connection StackOverflowError

Risk 46
Severity
7.5
First published (updated )
CVE-2026-40007

Apache IoTDBApache IoTDB: Unauthenticated heap-exhaustion DoS via unbounded allocation in IoTDB AirGap pipe receiver

Risk 46
Severity
7.5
First published (updated )
CVE-2026-40006

Apache Helix RESTApache Helix REST: Permissive CORS Configuration in REST API Allows Unrestricted Cross-Origin

Risk 46
Severity
7.5
First published (updated )
CVE-2026-57111

Apache OpenNLPApache OpenNLP :: Core :: ML :: LibSVM: Unsafe Java Deserialization in SvmDoccatModel

Risk 54
Severity
7.3
First published (updated )
CVE-2026-43825

Apache CamelApache Camel: CouchDB: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input

Risk 54
Severity
7.3
First published (updated )
CVE-2026-46588
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache CamelApache Camel: Couchbase: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input

Risk 54
Severity
7.3
First published (updated )
CVE-2026-46587

Apache CamelApache Camel: langchain4j-tools: filter tool argument headers against declared parameters

Risk 54
Severity
7.3
First published (updated )
CVE-2026-49042

Apache IoTDBApache IoTDB: Denial of Service via Resource Exhaustion in Aggregation Query

Risk 46
Severity
7.5
First published (updated )
CVE-2026-24012

Apache CamelApache Camel, Apache Camel: Camel JMS - CVE-2026-40860 fix bypass via DefaultExchangeHolder

Risk 54
Severity
7.3
First published (updated )
CVE-2026-43866

Apache CamelApache Camel: Camel-CXF: The SOAP operation-selection headers used non-Camel-prefixed names (operationName, operationNamespace) that bypass the HTTP header filter, allowing an HTTP client to redirect the invoked SOAP operation

Risk 43
Severity
7.5
First published (updated )
CVE-2026-46592
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203