Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Apache Kvrocks — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Apache Kvrocks, with AI-generated Chinese analysis, references, and POCs.

Vendor: Apache Software Foundation

CVE ID Title CVSS Severity Published
CVE-2026-41566 Apache Kvrocks: Improper permission for the APPLYBATCH command CWE-280 - - 2026-06-25
CVE-2026-45188 Apache Kvrocks: Replication Fullsync Path Traversal via Unvalidated Filename Handling CWE-23 - - 2026-06-25
CVE-2026-46751 Apache Kvrocks: Does not remove the unsafe loadstring function from its Lua sandbox, allowing a user who can run EVAL scripts to load crafted, unvalidated bytecode that crashes the server process, resulting in a remote denial of service. - - 2026-06-25
CVE-2026-46752 Apache Kvrocks: Stack buffer overflow in Lua bit.tohex() CWE-122 - - 2026-06-25
CVE-2026-54226 Apache Kvrocks: RESTORE IntSet Integer Overflow Leads to Remote DoS - - 2026-06-25
CVE-2025-59792 Apache Kvrocks: MONITOR command reveals plaintext credentials to non-admins 9.1 - 2025-11-28
CVE-2025-59790 Apache Kvrocks: RESET command grants admin privileges CWE-269 8.8 - 2025-11-28
CVE-2025-26413 Apache Kvrocks: The server was crashed by the negative offset CWE-20 7.5 - 2025-04-22
CVE-2025-25069 Apache Kvrocks: Cross-Protocol Scripting Vulnerability CWE-115 7.1 - 2025-02-07

All 9 known CVE vulnerabilities affecting Apache Kvrocks with full Chinese analysis, references, and POCs where available.