Known Vulnerabilities for products from Apache
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Apache".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-62393 json | Not Provided | 2026-07-14 | 2026-07-14 | |
| CVE-2026-62392 json | Not Provided | 2026-07-14 | 2026-07-15 | |
| CVE-2026-62390 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. A backend... | Not Provided | 2026-07-14 | 2026-07-14 |
| CVE-2026-59245 json | In the Apache Airflow FAB auth manager, a DAG whose `dag_id` is `DAGs` collided with the global all-DAGs permission resource ... | Not Provided | 2026-07-13 | 2026-07-14 |
| CVE-2026-59084 json | Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptI... | Not Provided | 2026-07-14 | 2026-07-14 |
| CVE-2026-59083 json | Not Provided | 2026-07-14 | 2026-07-14 | |
| CVE-2026-58319 json | Certain Apache Doris FE HTTP REST administrative APIs were accessible without proper authentication. An unauthenticated attac... | Not Provided | 2026-07-14 | 2026-07-14 |
| CVE-2026-58065 json | The Apache Airflow Git provider runs its git-over-SSH operations with `StrictHostKeyChecking=no` by default, disabling SSH ho... | Not Provided | 2026-07-13 | 2026-07-14 |
| CVE-2026-57915 json | Not Provided | 2026-06-26 | 2026-07-15 | |
| CVE-2026-57914 json | Not Provided | 2026-06-26 | 2026-06-26 | |
| CVE-2026-57111 json | Permissive Cross-Origin Resource Sharing (CORS) in the REST API (helix-rest, org.apache.helix.rest.server.filters.CORSFilter)... | Not Provided | 2026-07-09 | 2026-07-09 |
| CVE-2026-56140 json | Improper Input Validation vulnerability in Apache Camel AWS SNS component. The camel-aws2-sns component filters Camel heade... | Not Provided | 2026-07-06 | 2026-07-09 |
| CVE-2026-55957 json | Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate bind... | Not Provided | 2026-06-29 | 2026-07-02 |
| CVE-2026-55956 json | Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for the default servlet ignorin... | Not Provided | 2026-06-29 | 2026-07-02 |
| CVE-2026-55955 json | Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the clust... | Not Provided | 2026-06-29 | 2026-07-10 |
| CVE-2026-55276 json | Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation ... | Not Provided | 2026-06-29 | 2026-07-02 |
| CVE-2026-54665 json | Apache NiFi 0.0.1 through 2.9.0 support building qualified URLs from one of several HTTP request headers that provide an alte... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-54475 json | Missing Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ Classic... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-54428 json | Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5.4.2 and ear... | Not Provided | 2026-07-01 | 2026-07-06 |
| CVE-2026-54399 json | Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earl... | Not Provided | 2026-07-01 | 2026-07-06 |
Known software with vulnerabilities from Apache
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Apache | Accumulo | 1.10.0 |
| Application | Apache | Activemq | - |
| Application | Apache | Activemq Apollo | 1.0 |
| Application | Apache | Activemq Artemis | - |
| Application | Apache | Airflow | 0.1 |
| Application | Apache | Allura | 1.0.0 |
| Application | Apache | Ambari | 0.9 |
| Application | Apache | Amqp 0-x Jms Client | 6.0.3 |
| Application | Apache | Amqp Jms Client | 0.9.0 |
| Application | Apache | Ant | 1.1 |
| Application | Apache | Apache-ssl | 1.37 |
| Application | Apache | Apache Test | - |
| Application | Apache | Apisix | 1.2 |
| Application | Apache | Apr-util | 0.9.1 |
| Application | Apache | Archiva | 0.9 |
| Application | Apache | Arrow | 0.1.0 |
| Application | Apache | Asterixdb | - |
| Application | Apache | Atlas | 0.5.0 |
| Application | Apache | Axis | - |
| Application | Apache | Axis2 | - |