Known Vulnerabilities for products from Apache
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Apache".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-113730 json | Not Provided | 2026-10-20 | 2026-10-20 | |
| CVE-2026-108837 json | Not Provided | 2026-10-19 | 2026-10-19 | |
| CVE-2026-108833 json | Not Provided | 2026-10-19 | 2026-10-19 | |
| CVE-2026-108823 json | Not Provided | 2026-10-19 | 2026-10-19 | |
| CVE-2026-108780 json | Not Provided | 2026-10-19 | 2026-10-19 | |
| CVE-2026-108776 json | Not Provided | 2026-10-19 | 2026-10-19 | |
| CVE-2026-108771 json | Not Provided | 2026-10-19 | 2026-10-19 | |
| CVE-2026-108766 json | Not Provided | 2026-10-19 | 2026-10-19 | |
| CVE-2026-108764 json | Not Provided | 2026-10-19 | 2026-10-19 | |
| CVE-2026-108762 json | Not Provided | 2026-10-19 | 2026-10-19 | |
| CVE-2026-108039 json | By default, StaxUtils placed no limit on the total number of elements or the total number of characters in an XML document. A... | Not Provided | 2026-10-09 | 2026-10-16 |
| CVE-2026-107938 json | In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname i... | Not Provided | 2026-10-09 | 2026-10-16 |
| CVE-2026-107937 json | In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-head... | Not Provided | 2026-10-09 | 2026-10-16 |
| CVE-2026-105244 json | Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-105243 json | Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size t... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-105242 json | Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-105241 json | Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail fi... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-105240 json | Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache log4net. A NU... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-105239 json | Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net. A NUL charact... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-104714 json | Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache Struts. W... | Not Provided | 2026-10-05 | 2026-10-08 |
Known software with vulnerabilities from Apache
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Apache | Accumulo | 1.10.0 |
| Application | Apache | Activemq | - |
| Application | Apache | Activemq Apollo | 1.0 |
| Application | Apache | Activemq Artemis | - |
| Application | Apache | Airflow | 0.1 |
| Application | Apache | Allura | 1.0.0 |
| Application | Apache | Ambari | 0.9 |
| Application | Apache | Amqp 0-x Jms Client | 6.0.3 |
| Application | Apache | Amqp Jms Client | 0.9.0 |
| Application | Apache | Ant | 1.1 |
| Application | Apache | Apache-ssl | 1.37 |
| Application | Apache | Apache Test | - |
| Application | Apache | Apisix | 1.2 |
| Application | Apache | Apr-util | 0.9.1 |
| Application | Apache | Archiva | 0.9 |
| Application | Apache | Arrow | 0.1.0 |
| Application | Apache | Asterixdb | - |
| Application | Apache | Atlas | 0.5.0 |
| Application | Apache | Axis | - |
| Application | Apache | Axis2 | - |