Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,493CVE records
2,862Published, last 7 days
1,726In CISA KEV
1,447Critical, last 30 days
5,599Analysed
15:16 UTCLast NVD sync
Filters Show:
606 results. Apache.
Page 1 of 31| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-86473 | Critical | 9.1 |  Apache Airflow | Insufficient session expiration | — | — | 0.75% | Sep 21, 2026 |
| CVE-2026-76187 | Critical | 9.8 | Apache Airflow Providers Keycloak | Improper authentication | — | — | 0.98% | Sep 16, 2026 |
| CVE-2026-76186 | Critical | 9.1 | Apache Airflow Providers Keycloak | Reliance on cookies without valida | — | — | 0.81% | Sep 16, 2026 |
| CVE-2026-86462 | Critical | 9.1 | Apache Airflow Providers Fab | Insufficient session expiration | — | — | 0.83% | Sep 16, 2026 |
| CVE-2026-82311 | Critical | 9.8 | Apache Airflow Providers Fab | Insufficient session expiration | — | — | 0.98% | Sep 16, 2026 |
| CVE-2026-82617 | Critical | 10.0 | Apache Opennlp | Inefficient regular expression (Re | — | — | 0.77% | Sep 11, 2026 |
| CVE-2026-80352 | Critical | 9.8 | Apache Camel | Code injection | — | — | 0.84% | Sep 10, 2026 |
| CVE-2026-80351 | Critical | 9.8 | Apache Camel | CWE-95 | — | — | 1.0% | Sep 10, 2026 |
| CVE-2026-84939 | Critical | 9.1 | Apache Freemarker | Relative path traversal | — | — | 0.85% | Sep 10, 2026 |
| CVE-2026-67593 | Critical | 9.1 | Apache Artemis | Missing authentication for critica | — | — | 0.86% | Sep 10, 2026 |
| CVE-2026-57967 | Critical | 9.8 | Apache Artemis | Missing authentication for critica | — | — | 1.1% | Sep 10, 2026 |
| CVE-2026-49364 | Critical | 9.1 | Apache Artemis | Missing authentication for critica | — | — | 0.57% | Sep 10, 2026 |
| CVE-2026-56207 | Critical | 9.8 | Apache Impala | Improper verification of cryptogra | — | — | 0.46% | Sep 9, 2026 |
| CVE-2026-41871 | Critical | 9.8 | Apache Nutch | CWE-470 | — | — | 0.75% | Sep 9, 2026 |
| CVE-2026-41869 | Critical | 9.1 | Apache Nutch | Improper resource shutdown | — | — | 0.72% | Sep 9, 2026 |
| CVE-2026-75156 | Critical | 9.1 | Apache Airflow Providers Fab | Origin validation error | — | — | 0.38% | Sep 8, 2026 |
| CVE-2026-68525 | Critical | 9.1 | Apache Tomcat | Incorrect authorization | — | — | 0.64% | Aug 25, 2026 |
| CVE-2026-65905 | Critical | 9.8 | Apache Tomcat | Authentication bypass by capture-r | — | — | 0.78% | Aug 25, 2026 |
| CVE-2026-65637 | Critical | 9.8 | Apache Tomcat | Improper input validation | — | — | 0.74% | Aug 25, 2026 |
| CVE-2026-65182 | Critical | 9.1 | Apache Tomcat | Improper access control | — | — | 0.65% | Aug 25, 2026 |
