Known Vulnerabilities for products from Apache
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Apache".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-57915 json | Not Provided | 2026-06-26 | 2026-06-30 | |
| CVE-2026-57914 json | Not Provided | 2026-06-26 | 2026-06-26 | |
| CVE-2026-57111 json | Permissive Cross-Origin Resource Sharing (CORS) in the REST API (helix-rest, org.apache.helix.rest.server.filters.CORSFilter)... | Not Provided | 2026-07-09 | 2026-07-09 |
| CVE-2026-56140 json | Improper Input Validation vulnerability in Apache Camel AWS SNS component. The camel-aws2-sns component filters Camel heade... | Not Provided | 2026-07-06 | 2026-07-09 |
| CVE-2026-56139 json | Not Provided | 2026-07-06 | 2026-07-06 | |
| CVE-2026-56130 json | Not Provided | 2026-06-25 | 2026-06-25 | |
| CVE-2026-56091 json | Not Provided | 2026-06-25 | 2026-06-25 | |
| CVE-2026-55994 json | Not Provided | 2026-07-06 | 2026-07-06 | |
| CVE-2026-55993 json | Not Provided | 2026-07-06 | 2026-07-07 | |
| CVE-2026-55957 json | Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate bind... | Not Provided | 2026-06-29 | 2026-07-02 |
| CVE-2026-55956 json | Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for the default servlet ignorin... | Not Provided | 2026-06-29 | 2026-07-02 |
| CVE-2026-55955 json | Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the clust... | Not Provided | 2026-06-29 | 2026-07-10 |
| CVE-2026-55276 json | Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation ... | Not Provided | 2026-06-29 | 2026-07-02 |
| CVE-2026-54665 json | Apache NiFi 0.0.1 through 2.9.0 support building qualified URLs from one of several HTTP request headers that provide an alte... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-54475 json | Missing Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ Classic... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-54428 json | Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5.4.2 and ear... | Not Provided | 2026-07-01 | 2026-07-06 |
| CVE-2026-54399 json | Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earl... | Not Provided | 2026-07-01 | 2026-07-06 |
| CVE-2026-53917 json | Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Ap... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-53916 json | Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. A... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-53434 json | Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector. ... | Not Provided | 2026-06-29 | 2026-07-02 |
Known software with vulnerabilities from Apache
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Apache | Accumulo | 1.10.0 |
| Application | Apache | Activemq | - |
| Application | Apache | Activemq Apollo | 1.0 |
| Application | Apache | Activemq Artemis | - |
| Application | Apache | Airflow | 0.1 |
| Application | Apache | Allura | 1.0.0 |
| Application | Apache | Ambari | 0.9 |
| Application | Apache | Amqp 0-x Jms Client | 6.0.3 |
| Application | Apache | Amqp Jms Client | 0.9.0 |
| Application | Apache | Ant | 1.1 |
| Application | Apache | Apache-ssl | 1.37 |
| Application | Apache | Apache Test | - |
| Application | Apache | Apisix | 1.2 |
| Application | Apache | Apr-util | 0.9.1 |
| Application | Apache | Archiva | 0.9 |
| Application | Apache | Arrow | 0.1.0 |
| Application | Apache | Asterixdb | - |
| Application | Apache | Atlas | 0.5.0 |
| Application | Apache | Axis | - |
| Application | Apache | Axis2 | - |