Known vulnerabilities in Apache bRPC - page 2

Vendor: Apache Foundation
Software: Apache bRPC
Software CPE: cpe:2.3:a:apache_foundation:brpc:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 40
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache bRPC Apache bRPC is affected by 40 known vulnerabilities: 2 high, 36 medium, 2 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU157351 - Resource exhaustion
CVE-2026-78058		 CWE-400 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157352 - Resource exhaustion
CVE-2026-78066		 CWE-400 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157353 - Missing Authentication for Critical Function
CVE-2026-78334		 CWE-306 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157354 - Out-of-bounds read
CVE-2026-79704		 CWE-125 High
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157355 - Allocation of Resources Without Limits or Throttling
CVE-2026-80463		 CWE-770 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157356 - Allocation of Resources Without Limits or Throttling
CVE-2026-81755		 CWE-770 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157357 - Reachable Assertion
CVE-2026-82210		 CWE-617 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157358 - Uncontrolled Recursion
CVE-2026-82230		 CWE-674 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157359 - Uncaught Exception
CVE-2026-82231		 CWE-248 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157360 - Reachable Assertion
CVE-2026-82425		 CWE-617 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157361 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-82942		 CWE-362 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157362 - NULL Pointer Dereference
CVE-2026-82953		 CWE-476 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157363 - Use After Free
CVE-2026-84727		 CWE-416 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157364 - Interpretation Conflict
CVE-2026-84747		 CWE-436 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157365 - Missing Authorization
CVE-2026-84748		 CWE-862 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157366 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-86146		 CWE-444 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157367 - External Control of File Name or Path
CVE-2026-86147		 CWE-73 High
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157368 - Improper Authentication
CVE-2026-86249		 CWE-287 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157369 - Out-of-bounds read
CVE-2026-87849		 CWE-125 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157370 - NULL Pointer Dereference
CVE-2026-90484		 CWE-476 Medium
No
No
 1.18.0 23.10.2026 SB2026102312


Showing elements 21 - 40 out of 40