CVE-2026-68980

CVE-2026-68980 : Apache NiFi 2.0.0–2.10.0 allows creating, reading, and deleting Assets associated with Parameter Contexts via the REST API. The framework authorizes Asset deletion against the owning Parameter Context using the supplied Context and Asset Identifiers, but does so without verifying...