Known Vulnerabilities for Apisix by Apache
Listed below are 10 of the newest known vulnerabilities associated with "Apisix" by "Apache".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-94276 json | Improper Authentication vulnerability in Apache APISIX. On a route using openid-connect plugin with remote introspection aga... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-94269 json | Use of Non-Canonical URL paths for authorization decisions vulnerability in Apache APISIX. In some configurations where a ... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-94250 json | Allocation of resources without limits or throttling vulnerability in batch-requests plugin in Apache APISIX. An unauthent... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-94220 json | Cross-Site request forgery (CSRF) vulnerability in feishu-auth and dingtalk-auth plugins in Apache APISIX. An attacker who... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-94212 json | Improper verification of cryptographic signature vulnerability in Apache APISIX. Any unauthenticated attacker could impers... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-82806 json | Exposure of data element to wrong session vulnerability in Apache APISIX. This issue affects Apache APISIX: from 2.3.0 bef... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-78242 json | Insertion of sensitive information into log file vulnerability in Apache APISIX. This vulnerability can cause the unmasked... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-75020 json | Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache APISIX. A calle... | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-75005 json | Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin a gateway worker at 100% ... | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-74848 json | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache APISIX. An attacker... | Not Provided | 2026-08-27 | 2026-08-27 |