CVE-2026-43869

Apache Thrift versions before 0.23.0 are vulnerable to an Improper Validation of Certificate with Host Mismatch vulnerability (CWE-297/CWE-295). This flaw occurs due to insufficient validation during the certificate verification process. Users are recommended to upgrade to version 0.23.0 to resol...

BIT-THRIFT-2026-41603 Apache Thrift: Java TSSLTransportFactory hostname verification

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

CVE-2026-41603

CVE-2026-41603 is tied to an Apache Thrift vulnerability: improper validation of certificates with host mismatch, prior to version 0.23.0 . Public details from connected documents indicate multiple advisories: the IBM Security Bulletin for IBM Integration Bus for z/OS notes the issue affects vers...