Loading market data...
← Back to CVE feed

CVE-2026-48144

CRITICAL CVSS 9.1 View on NVD ↗

Description

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Products

apache/thrift

References

Published: Jul 27, 2026 12:16 UTC Modified: Jul 28, 2026 05:17 UTC