← Vulnerability feed

Vulnerability record · CVE-2026-30778 · published 15 April 2026

CVE-2026-30778: Apache skywalking vulnerability

Apache · Skywalking

The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. This issue affects Apache SkyWalking: from 9.7.0 through 10.3.0. Users are recommended to upgrade to version 10.4.0, which fixes the issue.

7.5 CVSS 3.1 High EPSS 0.59% · top 54.0% CWE-202 · CWE-202
7.5CVSS 3.1 base score
0.59%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. This issue affects Apache SkyWalking: from 9.7.0 through 10.3.0. Users are recommended to upgrade to version 10.4.0, which fixes the issue.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://lists.apache.org/thread/pvf35o3tp1rqhmrhzj6fg31gvqrqcvn3 Mailing ListVendor Advisory
http://www.openwall.com/lists/oss-security/2026/04/15/2 Mailing ListThird Party Advisory

Track CVE-2026-30778 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-13921Apache skywalking sql injection vulnerability**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.EPSS 33%7.5CVE-2020-9483Apache skywalking sql injection vulnerability**Resolved** When use H2/MySQL/TiDB as Apache SkyWalking storage, the metadata query through GraphQL protocol, there is a SQL injection vulnerability…EPSS 35%6.1CVE-2025-54057Apache skywalking vulnerabilityImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking. This issue affects Apache SkyWalkin…EPSS 0.76%

Source: NIST National Vulnerability Database (record CVE-2026-30778), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.