AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-61486

CRITICAL · CVSS 9.8 EPSS 0.57%

Source: NVD + CISA KEV + EPSS · Published 2026-08-05 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

Apache Lucy is vulnerable to a stack-based buffer overflow, which could potentially allow an attacker to execute arbitrary code. As the project is retired and no fixes will be released, organizations still using this software should prioritize migrating to an alternative solution or implement strict access controls to mitigate risks. Users of unsupported versions are particularly at risk and should take immediate action to secure their environments.

CVE
CVE-2026-61486
Severity
CRITICAL
CVSS
9.8
EPSS
0.57%
Apache

Original NVD Description

** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Related CVEs

Other vulnerabilities affecting the same vendor(s)