898 matches found
CVE-2026-39816 Apache NiFi: Missing Execute Code Required Permission on TinkerpopClientService
The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...
CVE-2026-39816
CVE-2026-39816 impacts Apache NiFi 2.0.0-M1 through 2.8.0 where the optional TinkerpopClientService (in the graph bundle, nifi-other-graph-services-nar) lacks the @Restricted annotation for Execute Code permission. This allows a flow designer with restricted privileges to configure ByteCode Submi...
Apache NiFi 安全漏洞
Apache NiFi is a data processing and distribution system developed by the Apache Foundation in the United States. This system is primarily used for data routing, transformation, and intermediate logic within the system. Vulnerabilities exist in versions 2.8.0 of Apache NiFi, as the optional...
CVE-2026-41409 vulnerabilities
Vulnerabilities for packages: jenkins, apache-nifi...
GHSA-F2WH-GRMH-R6JM vulnerabilities
Vulnerabilities for packages: jenkins, apache-nifi...
GHSA-F2WH-GRMH-R6JM vulnerabilities
Vulnerabilities for packages: guacamole-client, apache-nifi, apache-hop, hadoop-fips, apache-hop-fips, jenkins...
GHSA-CVC6-Q2CP-2XHW vulnerabilities
Vulnerabilities for packages: thingsboard, apache-nifi...
CVE-2026-22748 vulnerabilities
Vulnerabilities for packages: thingsboard, apache-nifi...
CVE-2026-22747 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, apache-nifi...
GHSA-2JRG-RF5X-568G vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, apache-nifi...
CVE-2026-22754 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, apache-nifi...
CVE-2026-22753 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, apache-nifi...
GHSA-4WRG-8WPC-H923 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, apache-nifi...
GHSA-4VRC-J85C-598C vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, apache-nifi...
CLEANSTART-2026-SR31778 Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc
Multiple security vulnerabilities affect the apache-nifi package. Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. See references for individual vulnerability details...
CLEANSTART-2026-VN28553 Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc
Multiple security vulnerabilities affect the apache-nifi package. Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. See references for individual vulnerability details...
CLEANSTART-2026-GN46454 When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written
Multiple security vulnerabilities affect the apache-nifi package. When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written. See references for individual vulnerability details...
Exploit for CVE-2026-39816
Apache NiFi CVE-2026-39816 POC Proof-of-concept demonstration...