[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-41603":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":60,"aliases":61,"duplicate_of":9,"upstream":62,"downstream":63,"duplicates":72,"related":73,"reserved_at":9,"published_at":76,"modified_at":77,"state":78,"summary":79,"references_raw":88,"kevs":146,"epss":147,"epss_history":150,"metrics":361,"affected":369},"CVE-2026-41603","Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.\n\nThis issue affects Apache Thrift: before 0.23.0.\n\nUsers are recommended to upgrade to version 0.23.0, which fixes the issue.",null,[11,20,47],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-297","Improper Validation of Certificate with Host Mismatch","The product communicates with a host that provides a certificate, but the product does not properly ensure that the certificate is actually associated with that host.","weakness","Incomplete","Variant","High",[],{"_key":21,"id":21,"name":22,"description":23,"type":15,"status":24,"abstraction":25,"likelihood_of_exploit":18,"capec":26},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","Draft","Base",[27,31,35,39,43],{"id":28,"name":29,"techniques":30},"CAPEC-12","Choosing Message Identifier",[],{"id":32,"name":33,"techniques":34},"CAPEC-166","Force the System to Reset Values",[],{"id":36,"name":37,"techniques":38},"CAPEC-216","Communication Channel Manipulation",[],{"id":40,"name":41,"techniques":42},"CAPEC-36","Using Unpublished Interfaces or Functionality",[],{"id":44,"name":45,"techniques":46},"CAPEC-62","Cross Site Request Forgery",[],{"_key":48,"id":48,"name":49,"description":50,"type":15,"status":24,"abstraction":25,"likelihood_of_exploit":9,"capec":51},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.",[52,56],{"id":53,"name":54,"techniques":55},"CAPEC-459","Creating a Rogue Certification Authority Certificate",[],{"id":57,"name":58,"techniques":59},"CAPEC-475","Signature Spoofing by Improper Validation",[],[],[],[],[64,66,68,70],{"_key":65},"DEBIAN-CVE-2026-41603",{"_key":67},"UBUNTU-CVE-2026-41603",{"_key":69},"SUSE-SU-2026:3056-1",{"_key":71},"SUSE-SU-2026:3057-1",[],[74,75],{"_key":69},{"_key":71},"2026-04-28T09:19:40.564Z","2026-07-22T12:08:36.927Z","Analyzed",{"cisa_kev":80,"cisa_ransomware":80,"cisa_vendor":9,"epss_severity":81,"epss_score":82,"severity":83,"severity_score":84,"severity_version":85,"severity_source":86,"severity_vector":87,"severity_status":78},false,"low",0.00593,"high",7.4,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",[89,98,102,108,113,118,122,126,130,134,138,142],{"url":90,"sources":91,"tags":93},"https://lists.apache.org/thread/lb4j0zyd5f3g36cos0wql925przpnwql",[86,92],"nvd",[94,95,96,97],"Vendor Advisory","Mailing List","Patch","Release Notes",{"url":99,"sources":100,"tags":101},"http://www.openwall.com/lists/oss-security/2026/04/28/7",[86,92],[95],{"url":103,"sources":104,"tags":105},"https://access.redhat.com/security/cve/CVE-2026-41603",[86],[106,107],"VDB Entry","X Refsource REDHAT",{"url":109,"sources":110,"tags":111},"https://bugzilla.redhat.com/show_bug.cgi?id=2463411",[86],[112,107],"Issue Tracking",{"url":114,"sources":115,"tags":116},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41603.json",[86],[117],"X Sadp Csaf Vex",{"url":119,"sources":120,"tags":121},"https://access.redhat.com/errata/RHSA-2026:22423",[86],[94,107],{"url":123,"sources":124,"tags":125},"https://access.redhat.com/errata/RHSA-2026:22347",[86],[94,107],{"url":127,"sources":128,"tags":129},"https://access.redhat.com/errata/RHSA-2026:21769",[86],[94,107],{"url":131,"sources":132,"tags":133},"https://access.redhat.com/errata/RHSA-2026:23345",[86],[94,107],{"url":135,"sources":136,"tags":137},"https://access.redhat.com/errata/RHSA-2026:24539",[86],[94,107],{"url":139,"sources":140,"tags":141},"https://access.redhat.com/errata/RHSA-2026:14885",[86],[94,107],{"url":143,"sources":144,"tags":145},"https://access.redhat.com/errata/RHSA-2026:36882",[86],[94,107],[],{"date":148,"score":82,"percentile":149},"2026-07-05",0.4409,[151,155,159,162,165,168,171,175,178,181,184,187,190,193,196,199,202,205,208,211,214,217,220,223,226,230,233,236,239,242,245,248,251,255,258,261,264,267,270,273,276,279,282,285,288,290,293,296,299,303,306,309,312,315,318,321,324,327,330,333,336,339,342,345,348,351,354,357,360],{"date":152,"score":153,"percentile":154},"2026-04-28",0.0001,0.01109,{"date":156,"score":157,"percentile":158},"2026-04-29",0.00045,0.13828,{"date":160,"score":157,"percentile":161},"2026-04-30",0.13802,{"date":163,"score":157,"percentile":164},"2026-05-01",0.13771,{"date":166,"score":157,"percentile":167},"2026-05-02",0.13796,{"date":169,"score":157,"percentile":170},"2026-05-03",0.13772,{"date":172,"score":173,"percentile":174},"2026-05-04",0.0006,0.1837,{"date":176,"score":173,"percentile":177},"2026-05-05",0.18357,{"date":179,"score":173,"percentile":180},"2026-05-06",0.18352,{"date":182,"score":173,"percentile":183},"2026-05-07",0.18442,{"date":185,"score":173,"percentile":186},"2026-05-08",0.18469,{"date":188,"score":173,"percentile":189},"2026-05-09",0.18543,{"date":191,"score":173,"percentile":192},"2026-05-10",0.1853,{"date":194,"score":173,"percentile":195},"2026-05-11",0.18505,{"date":197,"score":173,"percentile":198},"2026-05-12",0.18538,{"date":200,"score":173,"percentile":201},"2026-05-13",0.18586,{"date":203,"score":173,"percentile":204},"2026-05-14",0.18634,{"date":206,"score":173,"percentile":207},"2026-05-15",0.18637,{"date":209,"score":173,"percentile":210},"2026-05-16",0.18651,{"date":212,"score":173,"percentile":213},"2026-05-17",0.18631,{"date":215,"score":173,"percentile":216},"2026-05-18",0.18589,{"date":218,"score":173,"percentile":219},"2026-05-19",0.1858,{"date":221,"score":173,"percentile":222},"2026-05-20",0.18591,{"date":224,"score":173,"percentile":225},"2026-05-21",0.18571,{"date":227,"score":228,"percentile":229},"2026-05-22",0.00025,0.07327,{"date":231,"score":228,"percentile":232},"2026-05-23",0.07332,{"date":234,"score":228,"percentile":235},"2026-05-24",0.07333,{"date":237,"score":228,"percentile":238},"2026-05-25",0.07312,{"date":240,"score":228,"percentile":241},"2026-05-26",0.07297,{"date":243,"score":228,"percentile":244},"2026-05-27",0.07341,{"date":246,"score":228,"percentile":247},"2026-05-28",0.07485,{"date":249,"score":228,"percentile":250},"2026-05-29",0.07502,{"date":252,"score":253,"percentile":254},"2026-05-30",0.00028,0.08404,{"date":256,"score":253,"percentile":257},"2026-05-31",0.08387,{"date":259,"score":253,"percentile":260},"2026-06-01",0.08362,{"date":262,"score":253,"percentile":263},"2026-06-02",0.08318,{"date":265,"score":253,"percentile":266},"2026-06-03",0.08269,{"date":268,"score":253,"percentile":269},"2026-06-04",0.08282,{"date":271,"score":253,"percentile":272},"2026-06-05",0.08317,{"date":274,"score":253,"percentile":275},"2026-06-06",0.08329,{"date":277,"score":253,"percentile":278},"2026-06-07",0.08311,{"date":280,"score":253,"percentile":281},"2026-06-08",0.08259,{"date":283,"score":253,"percentile":284},"2026-06-09",0.08278,{"date":286,"score":253,"percentile":287},"2026-06-10",0.08291,{"date":289,"score":253,"percentile":263},"2026-06-11",{"date":291,"score":253,"percentile":292},"2026-06-12",0.08356,{"date":294,"score":253,"percentile":295},"2026-06-13",0.08358,{"date":297,"score":253,"percentile":298},"2026-06-14",0.08355,{"date":300,"score":301,"percentile":302},"2026-06-15",0.00252,0.16223,{"date":304,"score":301,"percentile":305},"2026-06-16",0.16247,{"date":307,"score":301,"percentile":308},"2026-06-17",0.1625,{"date":310,"score":301,"percentile":311},"2026-06-18",0.16266,{"date":313,"score":301,"percentile":314},"2026-06-19",0.16253,{"date":316,"score":301,"percentile":317},"2026-06-20",0.16241,{"date":319,"score":301,"percentile":320},"2026-06-21",0.16232,{"date":322,"score":301,"percentile":323},"2026-06-22",0.16214,{"date":325,"score":301,"percentile":326},"2026-06-23",0.16254,{"date":328,"score":301,"percentile":329},"2026-06-24",0.16275,{"date":331,"score":301,"percentile":332},"2026-06-25",0.16371,{"date":334,"score":301,"percentile":335},"2026-06-26",0.16396,{"date":337,"score":301,"percentile":338},"2026-06-27",0.16433,{"date":340,"score":301,"percentile":341},"2026-06-28",0.16398,{"date":343,"score":301,"percentile":344},"2026-06-29",0.16393,{"date":346,"score":82,"percentile":347},"2026-06-30",0.43911,{"date":349,"score":82,"percentile":350},"2026-07-01",0.44002,{"date":352,"score":82,"percentile":353},"2026-07-02",0.44037,{"date":355,"score":82,"percentile":356},"2026-07-03",0.44052,{"date":358,"score":82,"percentile":359},"2026-07-04",0.44076,{"date":148,"score":82,"percentile":149},[362,367],{"source":86,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":363,"cvss_v4_0":9},{"baseScore":84,"baseSeverity":364,"vectorString":87,"impactScore":365,"exploitabilityScore":366},"HIGH",8.7,5.6,{"source":92,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":368,"cvss_v4_0":9},{"baseScore":84,"baseSeverity":364,"vectorString":87,"impactScore":365,"exploitabilityScore":366},[370,381],{"ecosystem":9,"name":371,"vendor":372,"product":373,"cpe_part":374,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":375},"Apache Thrift","apache software foundation","apache thrift","a",[376],{"version":377,"is_range":378,"range_type":86,"version_start":9,"version_start_type":9,"version_end":379,"version_end_type":380,"fixed_in":9},"\u003C 0.23.0",true,"0.23.0","excluding",{"ecosystem":9,"name":382,"vendor":383,"product":382,"cpe_part":374,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":384},"thrift","apache",[385],{"version":386,"is_range":378,"range_type":387,"version_start":9,"version_start_type":9,"version_end":379,"version_end_type":380,"fixed_in":9},"lt0.23.0","cpe"]