OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-66055

HIGH · CVSS 8.2 EPSS 0.26%

Source: NVD + CISA KEV + EPSS · Published 2026-10-02 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

Apache Thrift versions prior to 0.25.0 are vulnerable to an allocation of resources without limits or throttling, which could lead to resource exhaustion and potential denial of service. This high-severity vulnerability impacts applications using Thrift in C++, Java, Go, .NET, Python, and Delphi bindings. Organizations utilizing these affected versions should prioritize upgrading to version 0.25.0 to mitigate the risk.

CVE
CVE-2026-66055
Severity
HIGH
CVSS
8.2
EPSS
0.26%
Apache Java

Original NVD Description

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift C++, Java, Go, netstd, Python and Delphi bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.