@stackflag.bsky.socialCVE-2026-82434 - apache storm nimbus
The Storm management component (Nimbus) and its client can reveal the secret used to talk to the coordination service, even to users who only have view rights. That…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-82617 - apache opennlp
OpenNLP’s built‑in email and web‑address detectors can be tricked by specially crafted text, causing the program to use excessive CPU time or run out of memory…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-41871 - apache nutch
The Nutch web service can be called by anyone, and it uses data from the request to decide which internal code to execute. This could let an attacker make the…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-41869 - apache nutch
The Nutch web service (versions 1.10 to 1.22) does not check who can send commands, so anyone who can reach the API could shut down the service or interrupt running…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-56207 - apache impala
Apache Impala versions 4.0.0 and newer could accept a special token without checking its signature in the final step of SAML2 login. This mistake lets a malicious…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-80351 - apache camel k
A flaw in Apache Camel K lets a tenant’s repository affect how Maven settings are processed, which can cause the operator to run the tenant’s code with its own privileges.…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-80352 - apache camel k
If someone can edit a Camel K configuration, they could add extra instructions that cause the system to create any kind of resource in your Kubernetes cluster, using the same…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-84939 - apache freemarker
If your application uses Apache FreeMarker versions 2.2.0 to 2.3.34 and allows custom locale settings, an attacker could trick it into loading files it…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-49364 - apache artemis
If an attacker can see traffic on the same network, they can trick Artemis into sending its cluster administrator credentials during the initial connection…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-57967 - apache artemis
The messaging servers can be tricked by an unauthenticated attacker into taking over an already logged‑in session, letting the attacker act as the legitimate…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-67593 - apache artemis
A remote user can send a special request that removes a message queue from the Artemis server even before they are logged in. This affects Artemis versions from…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-75156 - apache airflow fab provider
If you use the FAB authentication manager in Apache Airflow with Azure Active Directory, the software does not check that the login token really comes from your…
Too many irrelevant or confusing CVEs? Use stackflag.com