CVE-2026-39999

概要

参考情報

• lists.apache.org/thread/nfopt8cnxd3k0rs1oxtr7lzxrdw4mojq · Vendor Advisory
• openwall.com/lists/oss-security/2026/06/19/5 · Third Party Advisory

apisix のその他の脆弱性

• CVE-2026-75020高 8.1Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache APISIX. A caller who holds val…
• CVE-2026-75005高 7.5Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin a gateway worker at 100% CPU for an exte…
• CVE-2026-74848高 7.5Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache APISIX. An attacker could make oth…
• CVE-2026-63041高 8.8Reliance on Untrusted Inputs in a Security Decision vulnerability in Apache APISIX. This vulnerability allows an attacker to escalate privi…
• CVE-2026-49872高 8.1Improper Authentication vulnerability in Apache APISIX. When the cas-auth plugin is used in a route, an attacker can possibly authenticate …