Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how apache compares to other vendors in security performance

View Risk Score →

Software

apache http server
22
apache tomcat
19
apache apisix
5
apache subversion
5
apache airflow
3
apache ambari
3
apache camel
3
apache activemq artemis
2
apache artemis
2
apache cloudstack
2
apache cxf
2
apache ofbiz
2
apache tika
2
apache activemq
1
apache answer
1
apache apache
1
apache apache airflow
1
apache apache apisix
1
apache apache shiro
1
apache apache-airflow-providers-ftp
1
apache camel mail component
1
apache commons fileupload
1
apache commons httpclient
1
apache commons lang
1
apache commons lang 3
1
apache cordova
1
apache derby
1
apache hadoop
1
apache hive
1
apache ignite
1
apache jakarta slide
1
apache jclouds
1
apache jserv
1
apache karaf
1
apache karaf decanter
1
apache kvrocks
1
apache libcloud
1
apache libguac
1
apache log4j
1
apache mina
1
apache mod jk
1
apache mod perl
1
apache mod_dav_svn
1
apache mod_deflate
1
apache mod_dontdothat
1
apache mod_proxy_cluster
1
apache nifi
1
apache nimble
1
apache pdfbox
1
apache qpid
1

Apache CamelApache Camel Mail: The mail producer applied attacker-supplied message headers as JavaMail session properties, allowing an attacker to influence SMTP parameters

Risk 20
Severity
3.7
First published (updated )
CVE-2026-46584

Apache KvrocksApache Kvrocks: Replication Fullsync Path Traversal via Unvalidated Filename Handling

Risk 49
Severity
2.4
First published (updated )
CVE-2026-45188

Apache Apache ShiroApache Shiro: Remember-me cookie isn't checked for expiry on the server

Risk 15
Severity
2
First published (updated )
CVE-2026-56130

Apache nifiApache NiFi: Incorrect Authorization for Configuration Verification Requests

Risk 48
Severity
2.3
First published (updated )
CVE-2026-44911

Apache APISIXApache APISIX: cas-auth login CSRF / session injection issue

Risk 69
Severity
2.1
First published (updated )
CVE-2026-49871
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache APISIXApache APISIX: Cas-auth Host header influence on CAS service URL

Risk 46
Severity
2.1
First published (updated )
CVE-2026-48895

Apache APISIXApache APISIX: Identity spoofing issue in APISIX opa plugin

Risk 36
Severity
2.3
First published (updated )
CVE-2026-49231

Apache APISIXApache APISIX: Cas-auth plugin open redirect via unsanitized cookie value

Risk 40
Severity
2.1
First published (updated )
CVE-2026-44915

Apache Apache APISIXApache APISIX: wolf-rbac plugin Identity Spoofing

Risk 31
Severity
2.3
First published (updated )
CVE-2026-44046

pypi/apache-airflowApache Airflow: Log server JWT authorization bypass via Python lstrip() character stripping allows cross-Dag log access

Risk 18
Severity
3.1
First published (updated )
CVE-2026-45426
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

pypi/apache-airflowApache Airflow: DAG authorization bypass on /ui/structure/structure_data

Risk 18
Severity
3.1
First published (updated )
CVE-2026-40963

Apache TomcatObservable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue …

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2476512

Apache TomcatApache Tomcat: AJP secret compared in non-constant time

Risk 22
Severity
3.7
First published (updated )
CVE-2026-43514

Apache HTTP ServerNull Pointer Dereference

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2465296

Apache MINAApache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes…

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2463177
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache Apache AirflowApache Airflow: 3.x - Nested Variable Secret Values Bypass Redaction via max_depth=1

Risk 22
Severity
3.7
First published (updated )
CVE-2026-32690

Apache TomcatImproper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component of Apache …

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2457044

Apache TomcatInsertion of Sensitive Information into Log File vulnerability in the cloud membership for clusterin…

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2457038

Apache TomcatOccasional URL redirection to untrusted Site ('Open Redirect') vulnerability in Apache Tomcat via th…

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2457039

Apache TomcatInconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Ap…

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2457040
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache ARTEMISApache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission

Risk 24
Severity
2.3
First published (updated )
CVE-2026-32642

Apache TomcatInput Validation

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2440437

Apache ShiroApache Shiro: Brute force attack possible to determine valid user names

Risk 11
Severity
2.5
EPSS
0.01%
First published (updated )
CVE-2026-23901

Apache Karaf DecanterApache Karaf: Decanter log-socket collector has deserialization vulnerability

Risk 15
Severity
3.7
EPSS
0.03%
First published (updated )
CVE-2026-24656

Apache NimBLEApache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver

Risk 18
Severity
3.1
First published (updated )
CVE-2025-53470
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache Commons LangUncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang…

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2379554

Apache TomcatInteger Overflow

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2379374

Apache TomcatAuthentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat. When using…

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2373018

Apache TomcatImproper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a …

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2362782

Apache ActiveMQ ArtemisApache ActiveMQ Artemis: Address routing-type can be updated by user without the createAddress permission

Risk 24
Severity
2.3
First published (updated )
CVE-2025-27427
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203