Apache Nutch

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenSep 8, 2026
Last mentionedSep 8, 2026

Timeline

3 articles · newest first

CVE-2026-41871: Apache Nutch: Unauthenticated reflection-based job execution in Nutch Server (Nutch REST API)

Apache fixed CVE-2026-41871, an unauthenticated unsafe-reflection job execution flaw in Nutch Server's REST API affecting versions 1.10-1.22.

oss-securitySep 8, 15:33 UTC · Sep 8, 2026Vulnerability 3 sourcesCVE-2026-418713 · 1 read

CVE-2026-41870: Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API)

Apache fixed CVE-2026-41870, a critical unauthenticated RCE via JEXL injection in Nutch Server's REST API affecting versions 1.11-1.22.

oss-securitySep 8, 15:31 UTC · Sep 8, 2026Vulnerability 3 sourcesCVE-2026-418702

CVE-2026-41869: Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)

Apache Nutch CVE-2026-41869 (moderate) lets unauthenticated users force shutdown or interrupt jobs via the Nutch Server REST API; fixed in 1.23.

oss-securitySep 8, 15:29 UTC · Sep 8, 2026Vulnerability 3 sourcesCVE-2026-418691 · 1 read

Related CVEs

by mentions

CVE-2026-41871<1%9.8
Unauthenticated reflection-based job execution in Apache Nutch Server REST API
published Sep 9, 2026Apache Nutch (Nutch Server / Nutch REST API)
CVE-2026-41869<1%9.1
Unauthenticated job interruption and shutdown in Apache Nutch Server REST API
published Sep 9, 2026Apache Software Foundation Apache Nutch (Nutch Server / Nutch REST API)
CVE-2026-41870<1%8.8
Unauthenticated RCE via JEXL injection in Apache Nutch REST API
published Sep 9, 2026Apache Nutch (Nutch Server / Nutch REST API)

Appears with

Apache Software Foundationorganization · 2
Apache Software Foundationvendor · 2
ASForganization · 1
Apachevendor · 1
Nutch Serverproduct · 1

Entities are extracted by the model from each article. First seen Sep 8, 2026, last mentioned Sep 8, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.