CVE-2026-94639 - Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget)

CVE ID :CVE-2026-94639 Published : Oct. 2, 2026, 10:17 a.m. | 1 hour, 3 minutes ago Description :improper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught exception vulnerability in Apache Thrift Java bindings. This issue affects Apache...

#Sicherheitslücke

ARTICLEVIEW

CVE-2026-94639 - Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget)

VERWANDTEARTIKEL

CVE-2026-63772 - Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count

CVE-2026-66055 - Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language)

CVE-2026-66081 - Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages

CVE-2026-66837 - Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length

CVE-2026-66858 - Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml)

CVE-2026-66859 - Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route