VDB

CVE-2026-43869

CVE-2026-43869 PUBLISHED

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

EPSS 0.04% · 10.9th percentile

Risk Scores

EPSS Score
0.04%
10.9th percentile

Affected Products

VendorProductVersions
Apache Software FoundationApache Thrift0

Timeline

  • May 5, 2026 CVE Published
  • May 5, 2026 PoC Published
  • May 5, 2026 PoC Published
  • May 6, 2026 CVE Updated
  • May 9, 2026 Security Advisory
  • May 18, 2026 EPSS Score
  • May 19, 2026 EPSS Score
  • May 20, 2026 EPSS Score
  • May 21, 2026 EPSS Score
  • May 22, 2026 EPSS Score
  • May 23, 2026 EPSS Score
  • May 24, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›