org.apache.nifi:nifi-other-graph-services-nar (>=2.0.0 <=2.8.0) potentially affected by CVE-2026-39816 via org.apache.nifi:nifi-other-graph-services (>=2.0.0-M1 <=2.8.0)

org.apache.nifi:nifi-other-graph-services MAVEN version =2.0.0-M1, =2.0.0, =2.8.0 Source cves: CVE-2026-39816 Source advisory: SNYK:JAVA-ORGAPACHENIFI-16691310...

CVE-2026-39816

creationtimestamp| type| source ---|---|--- 2026-04-13 15:33:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjf6uw56zs2a 2026-04-28 23:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/81984 2026-04-29 02:10:29+00:00| seen|...

PT-2026-32513

Name of the Vulnerable Software and Affected Versions Apache NiFi affected versions not specified Description The TinkerpopClientService component of the Apache NiFi data processing platform contains access control errors. Specifically, it lacks the required Execute Code permission, which could...