目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Apache Software Foundation 厂商漏洞列表 / CVE 中文分析 2751

Apache Software Foundation 厂商相关 2751 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Apache Software Foundation 致力于开发和维护广泛使用的开源软件，涵盖 Web 服务器、数据库及中间件等核心领域。其项目历史上常暴露远程代码执行、跨站脚本及权限绕过等高危漏洞，多源于配置不当或代码逻辑缺陷。尽管拥有严格的代码审查机制，但部分组件仍因复杂性面临持续安全挑战。近期统计显示已收录 1717 条 CVE，凸显其生态规模与安全防护的持续重要性。

Top products by Apache Software Foundation: Apache Airflow Apache HTTP Server Apache Tomcat Apache Traffic Server Apache Thrift Apache Camel Apache Superset Apache CXF Apache OFBiz Apache CloudStack Apache NiFi Apache DolphinScheduler Apache InLong Apache bRPC Apache Syncope Apache Kylin Apache Answer Apache APISIX Apache Struts Apache Pulsar Apache IoTDB Apache OpenOffice Apache Zeppelin Apache Roller Apache Solr Apache OpenMeetings Apache Ranger Apache JSPWiki Apache Wicket Apache Fineract
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-81866 Apache NiFi 连接器配置资产授权缺失漏洞 — Apache NiFi CWE-862 0.5 Low 2026-09-16
CVE-2026-82561 Apache NiFi 组件引用授权缺失漏洞 — Apache NiFi CWE-862 5.9 Medium 2026-09-16
CVE-2026-86089 Apache NiFi 连接器迁移授权缺失漏洞 — Apache NiFi CWE-862 2.3 Low 2026-09-16
CVE-2026-87976 Apache NiFi Registry 路径限制不当漏洞 — Apache NiFi Registry CWE-22 7.2 High 2026-09-16
CVE-2026-76646 Apache MyFaces 无限请求解析拒绝服务漏洞 — Apache MyFaces CWE-400 - - 2026-09-16
CVE-2026-68536 Apache MyFaces SSRF/本地文件包含漏洞 — Apache MyFaces CWE-918 - - 2026-09-16
CVE-2026-84501 Apache ZooKeeper EnsembleAuthenticationProvider 操作日志伪造漏洞 — Apache ZooKeeper CWE-117 - - 2026-09-16
CVE-2026-84439 Apache ZooKeeper 审计日志注入漏洞 — Apache ZooKeeper CWE-117 - - 2026-09-16
CVE-2026-79993 Apache ZooKeeper 容器节点删除权限缺失漏洞 — Apache ZooKeeper CWE-862 - - 2026-09-16
CVE-2026-59969 ZooKeeper FIPS模式下主机不匹配证书验证不当 — Apache ZooKeeper CWE-297 - - 2026-09-16
CVE-2026-59739 Apache ZooKeeper 重连重放信息泄露 — Apache ZooKeeper CWE-862 - - 2026-09-16
CVE-2026-86466 Apache Airflow FAB提供商认证令牌校验缺失 — Apache Airflow FAB provider CWE-346 - - 2026-09-16
CVE-2026-76187 Apache Airflow Keycloak 任意客户端凭证会话劫持漏洞 — Apache Airflow Keycloak provider CWE-287 - - 2026-09-16
CVE-2026-76186 Apache Airflow Keycloak令牌会话绑定缺失 — Apache Airflow Keycloak provider CWE-565 - - 2026-09-16
CVE-2026-82310 Airflow FAB认证失效用户保留核心API权限 — Apache Airflow FAB provider CWE-613 - - 2026-09-16
CVE-2026-86792 Apache Kafka provider 远程代码执行漏洞 — Apache Airflow Apache Kafka provider CWE-470 - - 2026-09-16
CVE-2026-86462 Apache Airflow FAB密码更新未失效会话漏洞 — Apache Airflow FAB provider CWE-613 - - 2026-09-16
CVE-2026-82311 Apache Airflow FAB 密码重置会话失效失败 — Apache Airflow FAB provider CWE-613 - - 2026-09-16
CVE-2026-86465 Airflow Akeyless Provider 作用域绕过漏洞 — Apache Airflow Akeyless provider CWE-639 - - 2026-09-16
CVE-2026-82427 Apache Storm Nimbus 路径遍历漏洞 — Apache Storm Nimbus CWE-22 - - 2026-09-14
CVE-2026-82428 Apache Storm Client 路径遍历漏洞 — Apache Storm Client CWE-22 - - 2026-09-14
CVE-2026-82429 Apache Storm Worker Launcher 竞争条件问题漏洞 — Apache Storm Worker Launcher CWE-367 - - 2026-09-14
CVE-2026-82430 Apache Storm Worker Launcher 竞争条件问题漏洞 — Apache Storm Worker Launcher CWE-367 - - 2026-09-14
CVE-2026-82431 Apache Storm Client 授权问题漏洞 — Apache Storm Client CWE-863 - - 2026-09-14
CVE-2026-82433 Apache Storm Nimbus 信任管理问题漏洞 — Apache Storm Nimbus CWE-522 - - 2026-09-14
CVE-2026-82432 Apache Storm Nimbus 授权问题漏洞 — Apache Storm Nimbus CWE-863 - - 2026-09-14
CVE-2026-82434 Apache Storm Nimbus 信任管理问题漏洞 — Apache Storm Nimbus CWE-522 10.0 Critical 2026-09-14
CVE-2026-82435 Apache Storm Worker 资源管理错误漏洞 — Apache Storm Worker CWE-789 - - 2026-09-14
CVE-2026-82437 Apache Storm Logviewer 授权问题漏洞 — Apache Storm Logviewer CWE-862 - - 2026-09-14
CVE-2026-82426 Apache Storm Nimbus 路径遍历漏洞 — Apache Storm Nimbus CWE-22 - - 2026-09-14

本页汇总了 Apache Software Foundation 厂商截至目前公开的全部 2751 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。