apache

Top products

The 15 most recently published vulnerabilities affecting apache.

• CVE-2025-53648Apache Gravitino: SQL misconfiguration can access or truncate files5.4Jun 30, 2026
• CVE-2026-49486Apache Airflow FTP provider: FTP Provider does not protect FTPS data channel (missing PROT_P)7.5Jun 26, 2026
• CVE-2025-62198Apache Atlas: Stored XSS in Create Entity page5.4Jun 22, 2026
• CVE-2026-44914Apache NiFi: Missing Authorization of Restricted Permissions when Replacing Flow Contents7.2Jun 22, 2026
• CVE-2026-44911Apache NiFi: Incorrect Authorization for Configuration Verification Requests6.3Jun 22, 2026
• CVE-2026-44913Apache NiFi: Improper Escaping of Table Names in CaptureChangeMySQL7.2Jun 22, 2026
• CVE-2026-54665Apache NiFi: Missing Validation for Proxy Host Headers5.3Jun 22, 2026
• CVE-2025-66336Apache Doris MCP Server: SQL injection leading the authentication bypass8.1Jun 22, 2026
• CVE-2026-49872Apache APISIX: Improper authentication in cas-auth plugin8.1Jun 19, 2026
• CVE-2026-49871Apache APISIX: cas-auth login CSRF / session injection issue9.3Jun 19, 2026
• CVE-2026-47341Apache APISIX: Session replay issue in hmac-auth6.5Jun 19, 2026
• CVE-2026-48895Apache APISIX: Cas-auth Host header influence on CAS service URL7.2Jun 19, 2026
• CVE-2026-49231Apache APISIX: Identity spoofing issue in APISIX opa plugin5.4Jun 19, 2026
• CVE-2026-49230Apache APISIX: Authentication bypass in jwe-decrypt9.1Jun 19, 2026
• CVE-2026-44915Apache APISIX: Cas-auth plugin open redirect via unsanitized cookie value6.1Jun 19, 2026