VDB
CVE-2026-48586
CVE-2026-48586
PUBLISHED
As of July 27, 2026, Apache is affected by vulnerabilities in the following product: Apache Thrift Prior to 0.24.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
EPSS 1.07% · 61.8th percentile
Risk Scores
EPSS Score
1.07%
61.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Prior | Prior to 0.24.0 |
Timeline
- Jul 27, 2026 Coalition ESS Score
- Jul 27, 2026 CVE Published
- Jul 27, 2026 CVE Updated
- Jul 28, 2026 Security Advisory
- Jul 28, 2026 Security Advisory
- Aug 7, 2026 EPSS Score
- Aug 14, 2026 Distribution Patch
- Aug 14, 2026 Security Advisory
References
- https://lists.apache.org/thread/p008svsjf9p6bj47wyyf5dgglq5z7xoq vendor
- https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo vendor
- https://lists.apache.org/thread/z2myopbovxngfvchdz8hddots9p5ffbt vendor
- https://cyber.gc.ca/en/alerts-advisories/apache-security-advisory-av26-749 advisory
- https://lists.apache.org/thread/fmjl8l415tj9zwlob8v2dr5hq1d0hts7 vendor