Skip to content
Noroxi

Apache Thrift

10 credited records · 10 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Apache Thrift

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-83632
    36Monitor

    Apache Thrift: C++ THttpTransport grows its line buffer without bound

    CriticalCVSS 9.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-87117
    34Monitor

    Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-86536
    25Monitor

    Apache Thrift, Apache Thrift, Apache Thrift: A map key from the wire can replace a decoded object's prototype in generated JavaScript

    MediumCVSS 6.3No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-86535
    34Monitor

    Apache Thrift: A JSON member name can stall the Node server's event loop indefinitely

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-85088
    27Monitor

    Apache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries are present but do not match

    MediumCVSS 6.9No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-85087
    27Monitor

    Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op

    MediumCVSS 6.9No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-85086
    27Monitor

    Apache Thrift: Perl TLS client disables certificate verification by default

    MediumCVSS 6.9No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-82459
    32Monitor

    Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-85494
    34Monitor

    Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and bina

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-85483
    25Monitor

    Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end

    MediumCVSS 6.3No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026