oss-security·1d ago highCVE-2026-82377: Apache Roller: Missing weblog authorization in XML-RPC Blogger/MetaWeblog handlers#apache#apache-roller#cve-2026-82377CVE-2026-82377 17 sources
oss-security·2d agoCVE-2026-57590: Apache DolphinScheduler: Missing Authorization in Task Group APIs Allows Unauthorized Cross-Project Operations#apache#dolphinscheduler#cve-2026-57590CVE-2026-57590
ZDI Published Advisories·4d agoZDI-26-720: Foxit PDF Reader activeDocs Missing Authorization Information Disclosure Vulnerability#foxit#pdf-reader#information-disclosureCVE-2026-91788
oss-security·18d ago highCVE-2026-41870: Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API)#apache#code-injection#jexlCVE-2026-41870 3 sources1