Apache

14 CVEs tracked in the last 90 days

14 Total CVEs

5 Critical

5 High

2 Medium

2 Low

Severity Distribution

Critical 5 (35.7%)

High 5 (35.7%)

Medium 2 (14.3%)

Low 2 (14.3%)

Top Affected Products

apache tomcat 3

apache iotdb 2

apache zookeeper 2

chorny apache\ 1

apache activemq artemis 1

apache artemis 1

apache activemq 1

apache tomcat native 1

Latest CVEs

CVE ID	Severity	CVSS	Description	Date
CVE-2026-3963	low	3.7	A security flaw has been discovered in perfree go-fastdfs-web up to 1.3.7. This affects the function…	Mar 11, 2026
CVE-2026-24713	critical	9.8	Improper Input Validation vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.…	Mar 9, 2026
CVE-2026-24015	critical	9.8	A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0…	Mar 9, 2026
CVE-2026-24308	high	7.5	Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all pla…	Mar 7, 2026
CVE-2026-24281	high	7.4	Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN…	Mar 7, 2026
CVE-2025-40931	critical	9.1	Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id. Apache::S…	Mar 5, 2026
CVE-2026-27446	critical	9.8	Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache Activ…	Mar 4, 2026
CVE-2025-66168	medium	5.4	Apache ActiveMQ does not properly validate the remaining length field which may lead to an overflow …	Mar 4, 2026
CVE-2026-24734	high	7.5	Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an OCSP …	Feb 17, 2026
CVE-2026-24733	low	3.7	Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 requests t…	Feb 17, 2026
CVE-2025-66614	critical	9.1	Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 1…	Feb 17, 2026
CVE-2026-25087	high	7.0	Use After Free vulnerability in Apache Arrow C++. This issue affects Apache Arrow C++ from 15.0.0 t…	Feb 17, 2026
CVE-2026-24098	medium	6.5	Apache Airflow versions 3.0.0 - 3.1.7, has vulnerability that allows authenticated UI users with per…	Feb 9, 2026
CVE-2025-68493	high	8.1	Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache Str…	Jan 11, 2026