SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-58389

HIGH · CVSS 7.5 EPSS 0.61%

Source: NVD + CISA KEV + EPSS · Published 2026-07-27 · Last synced 2026-08-26

CyberRota Analysis

AI-Generated

Apache Thrift Rust bindings prior to version 0.24.0 are vulnerable to an allocation of resources without limits or throttling, potentially leading to resource exhaustion and denial of service. Organizations utilizing affected versions should prioritize upgrading to 0.24.0 to mitigate the risk of service disruption.

CVE
CVE-2026-58389
Severity
HIGH
CVSS
7.5
EPSS
0.61%
Apache

Original NVD Description

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)