Apache Software Foundation 厂商相关 2229 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
Apache Software Foundation 致力于开发和维护广泛使用的开源软件，涵盖 Web 服务器、数据库及中间件等核心领域。其项目历史上常暴露远程代码执行、跨站脚本及权限绕过等高危漏洞，多源于配置不当或代码逻辑缺陷。尽管拥有严格的代码审查机制，但部分组件仍因复杂性面临持续安全挑战。近期统计显示已收录 1717 条 CVE，凸显其生态规模与安全防护的持续重要性。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-42779 | Apache MINA 代码问题漏洞 — Apache MINA CWE-502 | 9.8 | Critical | 2026-05-01 |
| CVE-2026-42404 | Apache Neethi 代码问题漏洞 — Apache Neethi CWE-918 | 6.5 | Medium | 2026-05-01 |
| CVE-2026-42402 | Apache Neethi 资源管理错误漏洞 — Apache Neethi CWE-400 | 7.5 | High | 2026-05-01 |
| CVE-2026-42403 | Apache Neethi 资源管理错误漏洞 — Apache Neethi CWE-400 | 7.5 | High | 2026-05-01 |
| CVE-2026-41016 | Apache Airflow 信任管理问题漏洞 — Apache Airflow Providers SMTP CWE-295 | 7.4 | - | 2026-04-30 |
| CVE-2026-41873 | Apache Pony Mail 环境问题漏洞 — Pony Mail CWE-444 | 9.8AI | Critical AI | 2026-04-28 |
| CVE-2026-41636 | Apache Thrift 安全漏洞 — Apache Thrift CWE-674 | 7.5AI | High AI | 2026-04-28 |
| CVE-2026-41607 | Apache Thrift 缓冲区错误漏洞 — Apache Thrift CWE-125 | 7.5AI | High AI | 2026-04-28 |
| CVE-2026-41606 | Apache Thrift 安全漏洞 — Apache Thrift CWE-674 | 7.5AI | High AI | 2026-04-28 |
| CVE-2026-41605 | Apache Thrift 输入验证错误漏洞 — Apache Thrift CWE-190 | 9.8AI | Critical AI | 2026-04-28 |
| CVE-2026-41604 | Apache Thrift 缓冲区错误漏洞 — Apache Thrift CWE-125 | 7.5AI | High AI | 2026-04-28 |
| CVE-2026-41602 | Apache Thrift 输入验证错误漏洞 — Apache Thrift CWE-190 | 9.8AI | Critical AI | 2026-04-28 |
| CVE-2025-48431 | Apache Thrift 安全漏洞 — Apache Thrift CWE-762 | 7.5AI | High AI | 2026-04-28 |
| CVE-2026-40557 | Apache Storm Prometheus Reporter 信任管理问题漏洞 — Apache Storm Prometheus Reporter CWE-295 | 7.4AI | High AI | 2026-04-27 |
| CVE-2026-41081 | Apache Storm 授权问题漏洞 — Apache Storm Client CWE-287 | 9.1AI | Critical AI | 2026-04-27 |
| CVE-2026-27172 | Apache Camel 代码问题漏洞 — Apache Camel CWE-502 | 8.8AI | High AI | 2026-04-27 |
| CVE-2026-33453 | Apache Camel 安全漏洞 — Apache Camel CWE-915 | 9.8AI | Critical AI | 2026-04-27 |
| CVE-2026-33454 | Apache Camel 代码问题漏洞 — Apache Camel CWE-502 | 9.1AI | Critical AI | 2026-04-27 |
| CVE-2026-40022 | Apache Camel 安全漏洞 — Apache Camel Platform HTTP Main CWE-288 | 9.8AI | Critical AI | 2026-04-27 |
| CVE-2026-40858 | Apache Camel 代码问题漏洞 — Apache Camel CWE-502 | 8.8AI | High AI | 2026-04-27 |
| CVE-2026-41409 | Apache MINA 代码问题漏洞 — Apache MINA CWE-502 | 9.8 | Critical | 2026-04-27 |
| CVE-2026-41635 | Apache MINA 代码问题漏洞 — Apache MINA CWE-502 | 9.8 | Critical | 2026-04-27 |
| CVE-2026-40453 | Apache Camel 安全漏洞 — Apache Camel JMS CWE-178 | 9.8AI | Critical AI | 2026-04-27 |
| CVE-2026-40860 | Apache Camel 代码问题漏洞 — Apache Camel CWE-502 | 9.8AI | Critical AI | 2026-04-27 |
| CVE-2026-40048 | Apache Camel 代码问题漏洞 — Apache Camel PQC CWE-502 | 8.8AI | High AI | 2026-04-27 |
| CVE-2026-40473 | Apache Camel 代码问题漏洞 — Apache Camel Mina CWE-502 | 9.8AI | Critical AI | 2026-04-27 |
| CVE-2026-38743 | Apache Airflow 安全漏洞 — Apache Airflow CWE-1220 | 4.3AI | Medium AI | 2026-04-24 |
| CVE-2026-40690 | Apache Airflow 安全漏洞 — Apache Airflow CWE-1220 | 4.3AI | Medium AI | 2026-04-24 |
| CVE-2026-23902 | Apache DolphinScheduler 安全漏洞 — Apache DolphinScheduler CWE-863 | 8.8AI | High AI | 2026-04-24 |
| CVE-2025-62233 | Apache DolphinScheduler 代码问题漏洞 — Apache DolphinScheduler CWE-502 | 8.8AI | High AI | 2026-04-24 |
本页汇总了 Apache Software Foundation 厂商截至目前公开的全部 2229 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。