Skip to content

CVE record · 1 source

CVE-2026-120135

CVSS 8.2

Uncontrolled Recursion vulnerability in Apache Thrift Java bindings.

Vendor: Apache Software Foundation
Product: Apache Thrift
CVSS v4.0: 8.2 AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness: CWE-674

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

30

CVE NVD 11h ago

Uncontrolled Recursion vulnerability in Apache Thrift Java bindings.

Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

CVSS 8.2 Fix available CVE-2026-120135 Apache Software Foundation