Advisories · Technology

Apache Software Foundation Apache SkyWalking.

Every CVE that names Apache Software Foundation Apache SkyWalking among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-85229 CVE record

CVSS 6.1 Medium

Apache SkyWalking: CWE-79 stored XSS in Booster UI dashboard widgets (incomplete fix of CVE-2025-54057)
- Apache Software Foundation Apache SkyWalking
- Cross-site scripting (XSS)
Not analysed yet 4 Sept 2026
CVE-2026-71216 CVE record

CVSS 5.3 Medium

Apache SkyWalking: PagerDuty alarm hook transmits the integration routing key over cleartext HTTP
- Apache Software Foundation Apache SkyWalking
- Weak cryptography or TLS
Not analysed yet 4 Sept 2026