UpstreamscvelistV5 18:04ZCISA KEV 19:16ZVulnrichment 18:04ZNVD 18:04ZEPSS 19:16Zdaily run 06:06 UTC · next hourly 20:15

Sat 31 Oct 2026

Today

83 new ≥ 9.0 · 13 actionable · Apache Software Foundation clear

PriorityVulnerabilityCVSSEPSSSignals

Apache Software Foundation7 vulnerabilitiesMax CVSS 9.8Priority 40KEV 0

40

CVE-2026-56388

Apache Software Foundation Apache bRPC · Apache bRPC: Out-of-Bounds Write in Redis Command Parser

9.11.0%

39

CVE-2026-58663

Apache Software Foundation Apache IoTDB · Apache IoTDB: Auth Bypass in pipeTransfer() interface

9.80.6%

39

CVE-2026-59562

Apache Software Foundation Apache IoTDB · Apache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPC

9.80.6%

38

CVE-2026-108771

Apache Software Foundation Apache Kylin · Apache Kylin: unauthenticated broadcast API and polymorphic deserialization

9.80.5%

38

CVE-2026-78334

Apache Software Foundation Apache bRPC · Apache bRPC: Missing Authentication for Streaming RPC Frames

9.10.7%

37

CVE-2026-48830

Apache Software Foundation Apache bRPC · Apache bRPC: HTTP builtin request can mark a connection authenticated and bypass auth for later requests

9.10.6%

37

CVE-2026-86249

Apache Software Foundation Apache bRPC · Apache bRPC: Authentication bypass when a server sets ServerOptions.internal_port and ServerOptions.auth

9.10.6%

CVSS ×30KEV +30EPSS ×20exploit +10 · SSVC +10how the score works