OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-90440

HIGH · CVSS 8.2 EPSS 0.43%

Source: NVD + CISA KEV + EPSS · Published 2026-10-02 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

Apache Thrift versions prior to 0.25.0 are vulnerable to an improper handling of exceptional conditions, leading to potential resource shutdown issues in the nonblocking server component. This vulnerability could allow attackers to exploit uncaught exceptions, potentially resulting in service disruptions or unauthorized access. Organizations using affected versions should prioritize upgrading to 0.25.0 to mitigate these risks.

CVE
CVE-2026-90440
Severity
HIGH
CVSS
8.2
EPSS
0.43%
Apache

Original NVD Description

Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.