Apache Software Foundation Apache Storm UI

• CVE-2026-82433 Medium 6.5 Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Daemon Configuration via Nimbus and the UI 0.3%
• CVE-2026-84179 Medium 6.5 Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Merged Daemon Configuration via the Topology Page 0.4%
• CVE-2026-35565 Medium 5.4 Apache Storm UI: Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Storm UI 0.5%