AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-61485

HIGH · CVSS 7.5 EPSS 0.52%

Source: NVD + CISA KEV + EPSS · Published 2026-08-05 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

Apache Lucy is vulnerable to a memory allocation issue that can be exploited with excessive size values, potentially leading to denial of service or other memory-related issues. As the project is retired and no fixes will be released, organizations still using this software should prioritize migrating to alternative solutions or restrict access to trusted users only. Users of unsupported Apache products should be particularly vigilant in assessing their risk and implementing necessary mitigations.

CVE
CVE-2026-61485
Severity
HIGH
CVSS
7.5
EPSS
0.52%
Apache

Original NVD Description

** UNSUPPORTED WHEN ASSIGNED ** Memory Allocation with Excessive Size Value vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Related CVEs

Other vulnerabilities affecting the same vendor(s)