Apache Software Foundation Apache Doris

• CVE-2026-96443 Medium 6.5 Apache Doris: JDBC driver URL validation bypass leads to remote code execution 0.4%
• CVE-2026-31377 High 7.5 Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta Service 0.7%
• CVE-2026-68570 Medium 6.5 Apache Doris: Authorization bypass leading to unauthorized data access 0.4%
• CVE-2026-72524 High 8.8 Apache Doris: Authorization bypass allowing a low-privilege user to read/write/drop arbitrary tables 0.5%
• CVE-2026-58319 Critical 9.1 Apache Doris: Improper Authentication in Frontend HTTP API 0.7%
• CVE-2024-48019 Medium 5.4 Apache Doris: allows admin users to read arbitrary files through the REST API 1.0%
• CVE-2024-27438 Critical 9.8 Apache Doris: Downloading arbitrary remote jar files resulting in remote command execution 1.0%
• CVE-2024-26307 Medium 5.3 Apache Doris: Possible race condition 0.2%
• CVE-2023-41313 Critical 9.8 Apache Doris: Timing Attack weakness 1.1%
• CVE-2023-41314 Unrated Apache Doris: Missing API authentication allowed DoS 0.9%