org.apache.dolphinscheduler:dolphinscheduler-dist (>=3.4.0, <=3.4.2) potentially affected by CVE-2026-66082 via org.apache.dolphinscheduler:dolphinscheduler-api (>=3.4.0, <=3.4.2)

org.apache.dolphinscheduler:dolphinscheduler-api MAVEN version =3.4.0, =3.4.0, =3.4.2 Source cves: CVE-2026-66082 Source advisory: MEND:CVE-2026-66082...

EUVD-2026-94805

An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to perform unauthorized operations on workflow schedules, workflow definitions, and task instances in other projects. The affected endpoints check permissions against the supplied projectCode but fail to...

CVE-2026-66082

Apache DolphinScheduler versions before 3.4.3 are vulnerable to an authorization bypass (CWE-863) that allows authenticated users to perform unauthorized operations on workflow schedules, definitions, and task instances in other projects. The root cause is that affected endpoints verify permissio...

CVE-2026-86246

A flaw was found in Apache Tomcat Native, which enabled several insecure OpenSSL options by default: ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF, and ALLOWNODHEKEX. These defaults can weaken TLS protections. Apache Tomcat Native versions 1.3.0 through 1.3.8 and 2.0.0...

Exploit for OS Command Injection in Gnu Bash

Shellshock CVE-2014-6271 Vulhub's b...

Exploit for Path Traversal in Apache Http_Server

Apache HTTP Server 2.4.49 Path Traversal CVE-2021-41773 Vu...

CVE-2026-86243

A flaw was found in Apache Tomcat Native. A remote attacker can exploit a buffer over-read vulnerability during the Transport Layer Security TLS handshake. Successful exploitation causes the Java Virtual Machine JVM to crash, resulting in a denial of service DoS. Mitigation Upgrade Apache Tomcat...

RLSA-2026:77369 Important: mod_auth_openidc:2.3 security update

The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: modauthopenidc: Denial of Service via malformed state cookie parsi...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 are vulnerable to a persistent Denial of Service (DoS) . The flaw exists because the system directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configu...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell CVE-2021-44228 in Apache Solr Vulhubhttps://vu...

CLEANSTART-2026-FI29300 Connect2id Nimbus JOSE + JWT 10

Security vulnerability affects the apache-hive package. Connect2id Nimbus JOSE + JWT 10...

CLEANSTART-2026-CO70761 In Connect2id Nimbus JOSE+JWT before 9

Security vulnerability affects the apache-hive package. In Connect2id Nimbus JOSE+JWT before 9...

CLEANSTART-2026-EQ87084 Connect2id Nimbus JOSE+JWT before v7

Security vulnerability affects the apache-hive package. Connect2id Nimbus JOSE+JWT before v7...

CLEANSTART-2026-NG64377 Unbounded memory allocation in Google Guava 11

Security vulnerability affects the apache-hive package. Unbounded memory allocation in Google Guava 11...

CLEANSTART-2026-AO34403 temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com

Security vulnerability affects the apache-hive package. A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com...

CLEANSTART-2026-YW54942 Fasterxml Jackson version Before 2

Security vulnerability affects the apache-hive package. Fasterxml Jackson version Before 2...

CLEANSTART-2026-JS33298 flaw was discovered in FasterXML jackson-databind in all versions before 2

Security vulnerability affects the apache-hive package. A flaw was discovered in FasterXML jackson-databind in all versions before 2...