CVE-2026-49872

概要

参考情報

• lists.apache.org/thread/bzjpo60ygxo7kxdqf7vw3l5zw2lh6m5k · Vendor Advisory
• openwall.com/lists/oss-security/2026/06/19/15 · Third Party Advisory

apisix のその他の脆弱性

• CVE-2026-75020高 8.1Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache APISIX. A caller who holds val…
• CVE-2026-75005高 7.5Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin a gateway worker at 100% CPU for an exte…
• CVE-2026-74848高 7.5Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache APISIX. An attacker could make oth…
• CVE-2026-63041高 8.8Reliance on Untrusted Inputs in a Security Decision vulnerability in Apache APISIX. This vulnerability allows an attacker to escalate privi…
• CVE-2026-49871緊急 9.3Cross-Site Request Forgery (CSRF) vulnerability in the cas-auth plugin under default configurations. This defect allows a remote attacker t…