Back to overview

CVE-2026-46751

MEDIUM
5.5
CVSS 4.0
Description
A vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 2.2.0 through 2.15.0. Users are recommended to upgrade to version 2.16.0, which fixes the issue.

Metadata

CVE ID
CVE-2026-46751
State
PUBLISHED
Assigner
apache
Reserved
2026-05-18 11:48 UTC
Published
2026-06-25 08:01 UTC
Last updated
2026-06-25 09:09 UTC
Vendor / Product
Apache Software Foundation / Apache Kvrocks
Sources
cve.org  ·  NVD

Severity & Metrics

5.5 MEDIUM CVSS 4.0
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/V:D/RE:L/U:Green
Affected products (1)
VendorProductPlatformVersions
Apache Software Foundation Apache Kvrocks — 2.2.0 ≤ 2.15.0
Weakness (CWE)
CWESourceDescription
— cna Lua unvalidated bytecode
CVSS scores (1)
ScoreSeverityVersionSourceVector
5.5 MEDIUM 4.0 cna CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/V:D/RE:L/U:Green
References (1)
Back to overview