en
The Apache Software Foundation is an organization that supports and hosts open source software projects. The supplied product list covers projects for data analytics, web crawling, messaging, web serving, logging, and columnar data storage.
As of 10/16/2026, Apache Software Foundation recorded 612 security vulnerabilities in the last 90 days across 108 products, including 411 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Apache Thrift had the most security vulnerabilities in the Apache Software Foundation ecosystem, with 76 vulnerabilities—approximately 12.42% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-108743Apache Kylin: spark job OS command injectionCVE-2026-108709Apache Kylin: Unauthenticated Metadata Broadcast (inside in-house network)CVE-2026-69080Apache Kylin: Broken Access Control in QuerySQLBlacklistControllerCVE-2026-69077Apache Kylin: JobController allows unauthorized cross-project manipulationCVE-2026-69076Apache Kylin: Unauthorized cross-project job discard2,600 Results | Page 1 of 260
| SeverityUnknown |
| SeverityUnknown |
| SeverityUnknown |
| SeverityUnknown |
| SeverityUnknown |
| SeverityUnknown |
| SeverityUnknown |
| SeverityUnknown |
| SeverityUnknown |