Apache Software Foundation Apache Kvrocks

• CVE-2026-41566 Critical 9.4 Apache Kvrocks: Improper permission for the APPLYBATCH command 0.4%
• CVE-2026-45188 Low 2.4 Apache Kvrocks: Replication Fullsync Path Traversal via Unvalidated Filename Handling 0.2%
• CVE-2026-46751 Medium 5.5 Apache Kvrocks: Does not remove the unsafe loadstring function from its Lua sandbox, allowing a user who can run EVAL scripts to load crafted, unvalidated bytecode that crashes the server process, resulting in a remote denial of service. 0.3%
• CVE-2026-46752 Critical 10.0 Apache Kvrocks: Stack buffer overflow in Lua bit.tohex() 0.5%
• CVE-2026-54226 Medium 6.4 Apache Kvrocks: RESTORE IntSet Integer Overflow Leads to Remote DoS 0.4%
• CVE-2025-59792 Medium 5.3 Apache Kvrocks: MONITOR command reveals plaintext credentials to non-admins 0.3%
• CVE-2025-59790 Medium 5.4 Apache Kvrocks: RESET command grants admin privileges 0.4%
• CVE-2025-26413 High 7.5 Apache Kvrocks: The server was crashed by the negative offset 0.8%
• CVE-2025-25069 Medium 6.5 Apache Kvrocks: Cross-Protocol Scripting Vulnerability 0.8%