Aapolloconfig

Products

Exploited and recent CVEs

• CVE-2025-32781 Medium 6.5 Apollo: Apollo Portal release endpoint allows cross-application configuration disclosure via releaseId 0.4%
• CVE-2026-59954 High 7.5 Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching 0.6%
• CVE-2026-59955 High 7.5 Apollo ConfigService access key authentication bypass via raw config file appId parsing 0.6%
• CVE-2024-43397 Medium 4.3 Potential unauthorized access issue in apollo-portal 0.3%
• CVE-2023-25570 High 7.5 Apollo has potential access control security issue in eureka 0.8%
• CVE-2023-25569 Medium 5.7 apollo-portal has potential CSRF issue 0.4%