OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-94650

HIGH · CVSS 8.2 EPSS 0.43%

Source: NVD + CISA KEV + EPSS · Published 2026-10-02 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

Apache Thrift versions prior to 0.25.0 are vulnerable to an uncontrolled recursion issue in the c_glib bindings, which could lead to denial of service through excessive resource consumption. Organizations using affected versions should prioritize upgrading to 0.25.0 to mitigate the risk of service disruption.

CVE
CVE-2026-94650
Severity
HIGH
CVSS
8.2
EPSS
0.43%
Apache

Original NVD Description

Uncontrolled Recursion vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.