目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Apache Software Foundation 厂商漏洞列表 / CVE 中文分析 2751

Apache Software Foundation 厂商相关 2751 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Apache Software Foundation 致力于开发和维护广泛使用的开源软件，涵盖 Web 服务器、数据库及中间件等核心领域。其项目历史上常暴露远程代码执行、跨站脚本及权限绕过等高危漏洞，多源于配置不当或代码逻辑缺陷。尽管拥有严格的代码审查机制，但部分组件仍因复杂性面临持续安全挑战。近期统计显示已收录 1717 条 CVE，凸显其生态规模与安全防护的持续重要性。

Top products by Apache Software Foundation: Apache Airflow Apache HTTP Server Apache Tomcat Apache Traffic Server Apache Thrift Apache Camel Apache Superset Apache CXF Apache OFBiz Apache CloudStack Apache NiFi Apache DolphinScheduler Apache InLong Apache bRPC Apache Syncope Apache Kylin Apache Answer Apache APISIX Apache Struts Apache Pulsar Apache IoTDB Apache OpenOffice Apache Zeppelin Apache Roller Apache Solr Apache OpenMeetings Apache Ranger Apache JSPWiki Apache Wicket Apache Fineract
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-113582 Apache Abdera Atom 文档解析 XXE 漏洞 — Apache Abdera CWE-611 7.5 High 2026-10-22
CVE-2026-103634 Apache DataSketches 越界读写漏洞 — Apache DataSketches CWE-787 - - 2026-10-22
CVE-2026-112381 Apache Traffic Server 空指针解引用漏洞 — Apache Traffic Server CWE-476 5.9 Medium 2026-10-21
CVE-2026-111817 Apache Traffic Server 分块拖尾导致传输挂起漏洞 — Apache Traffic Server CWE-400 5.3 Medium 2026-10-21
CVE-2026-111812 Apache Traffic Server 远程代码执行漏洞 — Apache Traffic Server CWE-863 10.0 Critical 2026-10-21
CVE-2026-111811 Apache Traffic Server tsmemcache 插件未认证缓存漏洞 — Apache Traffic Server CWE-306 9.0 Critical 2026-10-21
CVE-2026-111809 Apache Traffic Server 请求走私漏洞 — Apache Traffic Server CWE-444 9.3 Critical 2026-10-21
CVE-2026-111810 Apache Traffic Server 未限流日志导致拒绝服务漏洞 — Apache Traffic Server CWE-400 7.5 High 2026-10-21
CVE-2026-111815 Apache Traffic Server TLS 会话恢复绕过 SNI 验证漏洞 — Apache Traffic Server CWE-295 10.0 Critical 2026-10-21
CVE-2026-111814 Apache Traffic Server mTLS 身份混淆漏洞 — Apache Traffic Server CWE-295 10.0 Critical 2026-10-21
CVE-2026-111808 Apache Traffic Server HTTP/2 资源耗尽漏洞 — Apache Traffic Server CWE-191 8.6 High 2026-10-21
CVE-2026-111805 Apache Traffic Server HTTP/2 后端工作池耗尽漏洞 — Apache Traffic Server CWE-400 8.6 High 2026-10-21
CVE-2026-111816 Apache Traffic Server 302 响应绕过解析漏洞 — Apache Traffic Server CWE-444 9.3 Critical 2026-10-21
CVE-2025-55702 Apache Traffic Server 请求解析漏洞 — Apache Traffic Server CWE-444 8.7 High 2026-10-21
CVE-2025-31699 Apache Traffic Server 请求走私漏洞 — Apache Traffic Server CWE-444 8.9 High 2026-10-21
CVE-2026-111804 Apache Traffic Server wasm 插件释放后使用漏洞 — Apache Traffic Server CWE-416 8.2 High 2026-10-21
CVE-2026-111813 Apache Traffic Server magick 插件远程代码执行漏洞 — Apache Traffic Server CWE-88 10.0 Critical 2026-10-21
CVE-2026-105945 Apache Pulsar 文件存储跨租户包访问漏洞 — Apache Pulsar CWE-22 7.7 High 2026-10-21
CVE-2026-105944 Apache Pulsar Manager 认证绕过及凭证泄露漏洞 — Apache Pulsar Manager CWE-306 10.0 Critical 2026-10-21
CVE-2026-105942 Apache Pulsar 代理请求权限提升漏洞 — Apache Pulsar CWE-863 7.7 High 2026-10-21
CVE-2026-105938 Apache Pulsar 订阅授权策略绕过漏洞 — Apache Pulsar CWE-863 2.3 Low 2026-10-21
CVE-2026-105937 Apache Pulsar 影子主题源授权缺失漏洞 — Apache Pulsar CWE-862 8.7 High 2026-10-21
CVE-2026-105936 Apache Pulsar 远程代码执行漏洞 — Apache Pulsar CWE-862 5.3 Medium 2026-10-21
CVE-2026-105935 Apache Pulsar 函数触发器越权写入漏洞 — Apache Pulsar CWE-862 4.9 Medium 2026-10-21
CVE-2026-105934 Apache Pulsar 截断分区主题租户管理授权绕过漏洞 — Apache Pulsar CWE-862 7.2 High 2026-10-21
CVE-2026-105933 Apache Pulsar 命名空间加密要求未强制执行漏洞 — Apache Pulsar CWE-636 2.3 Low 2026-10-21
CVE-2026-105932 Apache Pulsar 非持久主题过滤器端点未授权漏洞 — Apache Pulsar CWE-862 2.3 Low 2026-10-21
CVE-2026-105931 Apache Pulsar 交易管理端点未授权访问漏洞 — Apache Pulsar CWE-862 2.3 Low 2026-10-21
CVE-2026-105930 Apache Pulsar 函数包 URL 跨租户下载漏洞 — Apache Pulsar CWE-863 6.0 Medium 2026-10-21
CVE-2026-105927 Apache Pulsar WebSocket 死信主题未授权写入漏洞 — Apache Pulsar CWE-863 2.3 Low 2026-10-21

本页汇总了 Apache Software Foundation 厂商截至目前公开的全部 2751 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。