A
Üretici güvenlik profili42 aktif sömürülen CVE
apache
Ürün portföyü, yama kanıtları ve sömürü sinyalleri tek güvenlik karnesinde
Veriler CVE Programı, NVD, CISA KEV ve üretici güvenlik bültenlerinden birleştirilir.
Toplam CVE780
Kritik157
CISA KEV42
Public exploit84
Yama oranı%27
Ort. CVSS7.4
12 aylık açık hızı
2
12
7
3
6
33
30
86
172
165
88
30
CVE KEV
CVE önem dağılımı
780toplam CVE
Kritik157 (20%)
Yüksek337 (43%)
Orta261 (33%)
Düşük10 (1%)
Belirsiz15 (2%)
Yama ve sömürü görünümü
%27
Doğrulanmış yama
%5
CISA KEV
%11
Public exploit
206Yama var
7Kısmi
27Geçici çözüm
1Üretici: yama yok
539Bilinmiyor
Son güvenlik açıkları
-
CVE-2026-103636
Apache DataSketches: datasketches-cpp: Out-of-bounds read in VarOpt union deserialization allows denial of service via a truncated sketch
AS
Yama durumu bilinmiyorEPSS %0
-
CVE-2026-103635
Apache DataSketches: datasketches-cpp: Out-of-bounds read in compact Theta sketch deserialization allows denial of service via a crafted sketch
AS
Yama durumu bilinmiyorEPSS %0
-
CVE-2026-103513
Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in the CPC sketch deserialization allows memory corruption via a crafted sketch
AS
Yama durumu bilinmiyorEPSS %0
-
CVE-2026-103501
Apache DataSketches: datasketches-cpp: HLL CouponList Deserialization Buffer Overflow allows memory corruption via a crafted sketch
AS
Yama durumu bilinmiyorEPSS %0
8.8
CVE-2026-103413
Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml
AS
Yama doğrulandıEPSS %0
8.8
CVE-2026-103412
Apache Camel Karavan: project file name path traversal when committing a project to Git
AS
Yama doğrulandıEPSS %1
-
CVE-2026-108039
Apache CXF: Prevent unbounded XML document size in StaxUtils by adding default element and character limits
AS
Yama durumu bilinmiyorEPSS %0
-
CVE-2026-107938
Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification.
AS
Yama durumu bilinmiyorEPSS %0
-
CVE-2026-107937
Apache CXF: The attachment header size and count limits can be bypassed, which allows denial of service through memory exhaustion.
AS
Yama durumu bilinmiyorEPSS %0
-
CVE-2026-100227
Apache CXF: XML Signature wrapping in JAX-RS XML Security
AS
Yama durumu bilinmiyorEPSS %0