CVE-2025-27446

概要

参考情報

• lists.apache.org/thread/qwxnxolt0j5nvjfpr0mlz6h7nrtvyzng · Mailing List
• openwall.com/lists/oss-security/2025/07/06/1
• openwall.com/lists/oss-security/2025/07/07/1

apisix のその他の脆弱性

• CVE-2026-75020高 8.1Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache APISIX. A caller who holds val…
• CVE-2026-75005高 7.5Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin a gateway worker at 100% CPU for an exte…
• CVE-2026-74848高 7.5Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache APISIX. An attacker could make oth…
• CVE-2026-63041高 8.8Reliance on Untrusted Inputs in a Security Decision vulnerability in Apache APISIX. This vulnerability allows an attacker to escalate privi…
• CVE-2026-49872高 8.1Improper Authentication vulnerability in Apache APISIX. When the cas-auth plugin is used in a route, an attacker can possibly authenticate …