CVE-2026-41603

Опубликовано: 30 апр. 2026

Источник: msrc

CVSS3: 7.4

EPSS Низкий

Описание

Apache Thrift: Java TSSLTransportFactory hostname verification

EPSS

Процентиль: 44%

0.00571

Низкий

7.4 High

CVSS3

Связанные уязвимости

CVE-2026-41603

ubuntu

3 месяца назад

Rejected reason: This CVE ID is Rejected and will not be used. The record incorrectly described the affected language binding and fixed version. Use CVE-2026-66053, which was assigned to the vulnerability.

CVE-2026-41603

CVSS3: 8.2

redhat

3 месяца назад

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.