Known vulnerabilities in Apache Kvrocks

Software CPE: cpe:2.3:a:apache_foundation:apache_kvrocks:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Kvrocks Apache Kvrocks is affected by 9 known vulnerabilities: 3 medium, 6 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144861 - Integer overflow
CVE-2026-54226
CWE-190 Medium
No
No
2.16.0 24.08.2026 SB20260824126
#VU144860 - Heap-based Buffer Overflow
CVE-2026-46752
CWE-122 Low
No
No
2.16.0 24.08.2026 SB20260824126
#VU144859 - Exposed Dangerous Method or Function
CVE-2026-46751
CWE-749 Low
No
No
2.16.0 24.08.2026 SB20260824126
#VU144858 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-45188
CWE-22 Low
No
No
2.16.0 24.08.2026 SB20260824126
#VU144681 - Improper Access Control
CVE-2026-41566
CWE-284 Low
No
No
2.16.0 24.08.2026 SB20260824126
#VU119155 - Improper input validation
CVE-2025-26413
CWE-20 Medium
No
No
2.12.0 04.12.2025 SB2025120444
#VU119154 - Improper input validation
CVE-2025-25069
CWE-20 Medium
No
No
2.11.1 04.12.2025 SB2025120443
#VU119153 - Improper Privilege Management
CVE-2025-59790
CWE-269 Low
No
No
2.14.0 04.12.2025 SB2025120445
#VU119152 - Insufficiently Protected Credentials
CVE-2025-59792
CWE-522 Low
No
No
2.14.0 04.12.2025 SB2025120445