OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-66837

HIGH · CVSS 8.7 EPSS 0.29%

Source: NVD + CISA KEV + EPSS · Published 2026-10-02 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

Apache Thrift versions prior to 0.25.0 are vulnerable to a stack-based buffer overflow and integer overflow, which could allow an attacker to execute arbitrary code or crash the application. Organizations using affected versions should prioritize upgrading to 0.25.0 to mitigate the risk of exploitation and potential system compromise. This vulnerability poses a high severity threat, making it critical for users to address it promptly.

CVE
CVE-2026-66837
Severity
HIGH
CVSS
8.7
EPSS
0.29%
Apache

Original NVD Description

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.