Feed live

apache CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,382

All time

Critical · Active

12,007

CVSS ≥ 9.0

New · 14 days

2,192

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 91–120 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-61372	—	—	Apache Jena Fuseki: Web requests using SPARQL Update can escape file restrictions	Aug 3, 2026 22d ago
CVE-2026-53599	high	7.5/10	Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers	Jul 31, 2026 25d ago
CVE-2026-66756	medium	6.9/10	Apache Tika: unpack endpoint in tika-server allows configuration with unsecureFeatures=false	Jul 30, 2026 26d ago
CVE-2026-66755	medium	5.9/10	Apache Tika: Arbitrary Local File Read in ISArchiveParser	Jul 30, 2026 26d ago
CVE-2026-23985	medium	5.3/10	Apache Superset: Regular Expression Denial of Service (ReDoS) in SQL Parser	Jul 30, 2026 26d ago
CVE-2026-28813	—	—	Apache JSPWiki: JSPWiki vulnerable to JSON hijacking	Jul 30, 2026 26d ago
CVE-2026-28812	—	—	Apache JSPWiki: UserManager does not sanity-check user database at startup	Jul 30, 2026 26d ago
CVE-2026-44617	—	—	Apache Zeppelin: LDAP filter injection in LdapRealm — incomplete fix of CVE-2024-31867	Jul 30, 2026 26d ago
CVE-2026-44616	—	—	Apache Zeppelin: LDAP injection in ActiveDirectoryGroupRealm filter construction	Jul 30, 2026 26d ago
CVE-2026-44613	—	—	Apache Zeppelin: Cross-site request forgery in REST and WebSocket request handling	Jul 30, 2026 26d ago
CVE-2026-9177	critical	9.4/10	Server-Side Template Injection in SecureTransport's Apache Velocity mail templates	Jul 29, 2026 28d ago
CVE-2026-50622	—	—	Apache Atlas: Missing Authorization on Admin Endpoints	Jul 29, 2026 28d ago
CVE-2026-23904	—	—	Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxy	Jul 29, 2026 28d ago
CVE-2026-65100	medium	4.8/10	Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode	Jul 29, 2026 28d ago
CVE-2026-58189	high	7.5/10	Apache Traffic Server: Plugins resetting the redirect counter enable SSRF amplification	Jul 29, 2026 28d ago
CVE-2026-58188	high	8.2/10	Apache Traffic Server: Memory-safety and limit-bypass errors across experimental plugins	Jul 29, 2026 28d ago
CVE-2026-58187	low	3.7/10	Apache Traffic Server: Multiplexer plugin chunk decoder enables a denial of service	Jul 29, 2026 28d ago
CVE-2026-58186	high	7.5/10	Apache Traffic Server: webp_transform plugin decodes unsafely and mislabels degraded responses	Jul 29, 2026 28d ago
CVE-2026-58185	medium	5.9/10	Apache Traffic Server: Use-after-free in the intercept plugin	Jul 29, 2026 28d ago
CVE-2026-58184	high	8.2/10	Apache Traffic Server: header_rewrite plugin cookie handling can corrupt memory	Jul 29, 2026 28d ago
CVE-2026-58183	medium	5.9/10	Apache Traffic Server: prefetch plugin can crash on attacker-influenced input	Jul 29, 2026 28d ago
CVE-2026-58182	high	8.6/10	Apache Traffic Server: ts_lua plugin has initialization and resource-handling errors	Jul 29, 2026 28d ago
CVE-2026-58181	high	7.5/10	Apache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crash	Jul 29, 2026 28d ago
CVE-2026-58180	high	7.5/10	Apache Traffic Server: txn_box plugin overflows the stack from attacker input	Jul 29, 2026 28d ago
CVE-2026-58179	high	8.1/10	Apache Traffic Server: regex_remap plugin overflows the stack from attacker input	Jul 29, 2026 28d ago
CVE-2026-58178	high	7.5/10	Apache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery	Jul 29, 2026 28d ago
CVE-2026-58177	high	8.1/10	Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework	Jul 29, 2026 28d ago
CVE-2026-58175	high	7.5/10	Apache Traffic Server: HostDB SRV handling leaks memory	Jul 29, 2026 28d ago
CVE-2026-58164	high	7.5/10	Apache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free	Jul 29, 2026 28d ago
CVE-2026-58163	high	7.5/10	Apache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server	Jul 29, 2026 28d ago