Apache Software Foundation Apache Nutch

• CVE-2026-41871 Critical 9.8 Apache Nutch: Unauthenticated reflection-based job execution in Nutch Server (Nutch REST API) 0.7%
• CVE-2026-41869 Critical 9.1 Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API) 0.7%
• CVE-2026-41870 High 8.8 Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API) 0.7%
• CVE-2021-23901 Unrated An XML external entity (XXE) injection vulnerability exists in the Nutch DmozParser 4.4%