| CVE-2026-94276 |
Improper Authentication vulnerability in Apache APISIX
|
5.1
Medium
|
Oct 1, 2026 |
| CVE-2026-94269 |
Use of Non-Canonical URL paths for authorization decisions vulnerability in Apache APISIX
|
6.3
Medium
|
Oct 1, 2026 |
| CVE-2026-94250 |
Allocation of resources without limits or throttling vulnerability in batch-requests plugin in Apache APISIX
|
8.2
High
|
Oct 1, 2026 |
| CVE-2026-94220 |
Cross-Site request forgery (CSRF) vulnerability in feishu-auth and dingtalk-auth plugins in Apache APISIX
|
2.1
Low
|
Oct 1, 2026 |
| CVE-2026-94212 |
Improper verification of cryptographic signature vulnerability in Apache APISIX
|
6.4
Medium
|
Oct 1, 2026 |
| CVE-2026-82806 |
Exposure of data element to wrong session vulnerability in Apache APISIX
|
5.3
Medium
|
Oct 1, 2026 |
| CVE-2026-78242 |
Insertion of sensitive information into log file vulnerability in Apache APISIX
|
5.7
Medium
|
Oct 1, 2026 |
| CVE-2026-74848 |
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache APISIX
|
7.0
High
|
Aug 27, 2026 |
| CVE-2026-75005 |
Inefficient Algorithmic Complexity vulnerability in Apache APISIX
|
8.7
High
|
Aug 27, 2026 |
| CVE-2026-75020 |
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache APISIX
|
7.0
High
|
Aug 27, 2026 |
| CVE-2026-63041 |
Reliance on Untrusted Inputs in a Security Decision vulnerability in Apache APISIX
|
5.3
Medium
|
Aug 26, 2026 |
| CVE-2026-49872 |
Improper Authentication vulnerability in Apache APISIX
|
5.3
Medium
|
Jun 19, 2026 |
| CVE-2026-49871 |
Cross-Site Request Forgery (CSRF) vulnerability in the cas-auth plugin under default configurations
|
2.1
Low
|
Jun 19, 2026 |
| CVE-2026-47341 |
Authentication Bypass by Capture-replay vulnerability in Apache APISIX
|
6.3
Medium
|
Jun 19, 2026 |
| CVE-2026-48895 |
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache APISIX
|
2.1
Low
|
Jun 19, 2026 |
| CVE-2026-49231 |
Authentication Bypass by Spoofing vulnerability in opa plugin
|
2.3
Low
|
Jun 19, 2026 |
| CVE-2026-49230 |
Improper Validation of Integrity Check Value vulnerability in Apache APISIX
|
6.3
Medium
|
Jun 19, 2026 |
| CVE-2026-44915 |
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache APISIX
|
2.1
Low
|
Jun 19, 2026 |
| CVE-2026-44087 |
Insufficient Verification of Data Authenticity vulnerability in Apache APISIX
|
5.3
Medium
|
Jun 19, 2026 |
| CVE-2026-47339 |
Incorrect Authorization vulnerability in Apache APISIX
|
5.3
Medium
|
Jun 19, 2026 |
| CVE-2026-44046 |
Use of Less Trusted Source vulnerability in Apache APISIX
|
2.3
Low
|
Jun 19, 2026 |
| CVE-2026-39999 |
Authentication Bypass by Spoofing vulnerability in Apache APISIX
|
7.0
High
|
Jun 19, 2026 |
| CVE-2026-39998 |
Improper Input Validation vulnerability in Apache APISIX
|
5.8
Medium
|
Jun 19, 2026 |
| CVE-2026-31923 |
Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX
|
Not rated
|
Apr 14, 2026 |
| CVE-2026-31924 |
Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX
|
Not rated
|
Apr 14, 2026 |