SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-55970

MEDIUM · CVSS 6.5 EPSS 0.48%

Source: NVD + CISA KEV + EPSS · Published 2026-07-27 · Last synced 2026-08-26

CyberRota Analysis

AI-Generated

A buffer over-read vulnerability in the C++ bindings of Apache Thrift prior to version 0.24.0 can lead to potential information disclosure. Organizations utilizing affected versions should prioritize upgrading to version 0.24.0 to mitigate the risk associated with this medium-severity flaw.

CVE
CVE-2026-55970
Severity
MEDIUM
CVSS
6.5
EPSS
0.48%
Apache

Original NVD Description

Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-86792 HIGH CVE-2026-86466 HIGH CVE-2026-84501 MEDIUM CVE-2026-84439 MEDIUM CVE-2026-82310 HIGH CVE-2026-79993 HIGH