Vulnerabilitymedium
CVE-2026-96443: Apache Doris: JDBC driver URL validation bypass leads to remote code execution
AI summary · grok-4.7Summaries by Vani AI
Apache Doris JDBC driver URL validation bypass CVE-2026-96443 can lead to remote code execution; Apache rates it moderate.
Apache disclosed CVE-2026-96443, a moderate-severity vulnerability in Apache Doris, in an oss-security post by Calvin Kirs on September 23, 2026. A JDBC driver URL validation bypass can lead to remote code execution. The short notice does not list affected versions or say the flaw is being exploited.
Key facts
- CVE-2026-96443 is rated moderate in Apache Doris.
- A JDBC driver URL validation bypass can lead to remote code execution.
- The note does not report in-the-wild exploitation or fixed versions.
- CVEs
- CVE-2026-96443
- Vendors
- Apache
- Products
- Apache Doris
- Organizations
- Apache Software Foundation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-96443 | Privileged-User RCE via JDBC Driver URL Bypass in Apache Doris Frontend | 6.5 | — |
From the original article
Posted by Calvin Kirs on Sep 23 Severity: moderate https://doris. apache. org https://www.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.