834 CVEs matching "Apache"
CVE Severity CVSS EPSS Vendor Product Version Flags
CVE-2026-68982 critical 9.8 0.0046 Apache Software Foundation Apache Airflow 0 < 3.4.0 1 PoC
CVE-2026-82907 critical 9.8 0.0087 apache ofbiz < 24.09.08
CVE-2026-83542 critical 9.8 0.0137 apache ofbiz < 24.09.08 1 PoC
CVE-2025-12543 critical 9.6 0.0133 redhat build_of_apache_camel < 4.14.4
CVE-2024-53677 critical 9.5 0.7237 Apache Software Foundation Apache Struts 2.0.0 < 6.4.0 18 PoC
CVE-2024-53677 critical 9.5 0.7237 apache struts < 6.4.0 18 PoC
CVE-2026-42809 critical 9.4 0.0036 apache polaris < 1.4.1
CVE-2026-42810 critical 9.4 0.0043 apache polaris < 1.4.1
CVE-2026-42811 critical 9.4 0.0043 apache polaris < 1.4.1
CVE-2026-42812 critical 9.4 0.0037 apache polaris < 1.4.1
CVE-2026-111809 critical 9.3 0.0022 Apache Software Foundation Apache Traffic Server 8.0.0
CVE-2026-55971 critical 9.3 0.0098 apache thrift < 0.24.0
CVE-2026-111497 critical 9.2 0.8264 apache arrow < 26.0.0 KEV 92 PoC
CVE-2026-111497 critical 9.2 0.8264 apache arrow 27.0.0 KEV 92 PoC
CVE-2026-105869 critical 9.2 0.0030 Apache Software Foundation Apache Pulsar 2.8.1 < 4.0.14
CVE-2026-105869 critical 9.2 0.0030 Apache Software Foundation Apache Pulsar 4.1.0 < 4.2.5
CVE-2026-111108 critical 9.1 0.0059 Apache Software Foundation Apache Kafka 3.3.0
CVE-2026-111115 critical 9.1 0.0056 Apache Software Foundation Apache Kafka 2.4.0
CVE-2026-111496 critical 9.1 0.0051 Apache Software Foundation Apache Kafka 1.1.0
CVE-2026-110985 critical 9.1 0.0018 Apache Software Foundation Apache Kafka 4.1.0
CVE-2026-28367 critical 9.1 0.0072 redhat build_of_apache_camel_-_hawtio 4.0
CVE-2026-28367 critical 9.1 0.0072 redhat build_of_apache_camel_for_spring_boot 4.0
CVE-2026-28368 critical 9.1 0.0073 redhat build_of_apache_camel_-_hawtio 4.0
CVE-2026-28368 critical 9.1 0.0073 redhat build_of_apache_camel_for_spring_boot 4.0
CVE-2026-28369 critical 9.1 0.0069 redhat build_of_apache_camel_-_hawtio 4.0
CVE-2026-28369 critical 9.1 0.0069 redhat build_of_apache_camel_for_spring_boot 4.0
CVE-2026-29145 critical 9.1 0.0073 apache tomcat < 9.0.116
CVE-2026-29145 critical 9.1 0.0073 apache tomcat 10.1.0
CVE-2026-29145 critical 9.1 0.0073 apache tomcat_native < 1.3.7
CVE-2026-31908 critical 9.1 0.0053 apache apisix < 3.16.0
CVE-2026-40010 critical 9.1 0.0038 apache wicket < 8.17.0
CVE-2026-25199 critical 9.1 0.0050 apache cloudstack < 4.22.0.1
CVE-2026-43515 critical 9.1 0.0122 apache tomcat < 7.0.109
CVE-2026-50627 critical 9.1 0.0412 apache cxf < 4.1.7
CVE-2026-32967 critical 9.1 0.0034 apache dolphinscheduler < 3.4.2
CVE-2026-50203 critical 9.1 0.0063 apache apache-airflow-providers-sftp < 5.8.1
CVE-2026-53434 critical 9.1 0.0059 apache tomcat < 9.0.119
CVE-2026-55276 critical 9.1 0.0061 apache tomcat < 9.0.119
CVE-2026-24013 critical 9.1 0.0063 apache iotdb < 2.0.8
CVE-2026-40047 critical 9.1 0.0243 apache camel < 4.18.3
CVE-2026-48203 critical 9.1 0.0060 apache camel < 4.14.8
CVE-2026-48205 critical 9.1 0.0060 apache camel < 4.14.8
CVE-2026-41041 critical 9.1 0.0060 apache gravitino < 1.2.1
CVE-2026-59084 critical 9.1 0.0051 apache tomcat < 7.0.109
CVE-2026-58319 critical 9.1 0.0075 apache doris < 3.1.0
CVE-2026-64609 critical 9.1 0.0078 apache fory < 1.4.0
CVE-2026-48144 critical 9.1 0.0040 apache thrift < 0.24.0
CVE-2026-60053 critical 9.1 0.0057 apache answer < 2.0.2
CVE-2026-61466 critical 9.1 0.0071 apache cxf < 3.6.12
CVE-2026-63687 critical 9.1 0.0028 apache cxf < 3.6.12