PT-2026-36985 · Apache · Apache Thrift

CVE-2026-43869

Published

2026-05-05

Updated

2026-08-25

CVSS v3.1

7.3

High

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.23.0

Description Improper validation of certificates with host mismatch occurs in Apache Thrift.

Recommendations Upgrade to version 0.23.0.

Exploit

Fix

Improper Certificate Validation

Found an issue in the description? Have something to add? Feel free to write us 👾

BIT-THRIFT-2026-43869

CLEANSTART-2026-RS65756

CLEANSTART-2026-SH44648

CVE-2026-43869

GHSA-7PWC-H2J2-RJGJ

Apache Thrift