SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-48145

HIGH · CVSS 7.5 EPSS 0.27%

Source: NVD + CISA KEV + EPSS · Published 2026-07-27 · Last synced 2026-08-26

CyberRota Analysis

AI-Generated

Apache Thrift C++ bindings prior to version 0.24.0 are vulnerable to improper validation of certificates with host mismatches, potentially allowing attackers to exploit this weakness for man-in-the-middle attacks. Organizations using affected versions should prioritize upgrading to 0.24.0 to mitigate the risk of unauthorized access and data interception. This vulnerability is particularly critical for environments handling sensitive data or operating in secure communication contexts.

CVE
CVE-2026-48145
Severity
HIGH
CVSS
7.5
EPSS
0.27%
Apache

Original NVD Description

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)