# Apache Software Foundation Apache Storm Nimbus.

Every CVE that names Apache Software Foundation Apache Storm Nimbus among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Apache Storm Nimbus: Path Traversal as the Supervisor User via Unsanitised Blobstore Map Local Name](https://agentprime.io/advisories/CVE-2026-82427.md)
  `CVE-2026-82427` · CVE record: Apache Software Foundation Apache Storm Nimbus · CVSS 7.8 High · Not analysed yet · Published 14 Sept 2026 · Tags: Path traversal
- [Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Daemon Configuration via Nimbus and the UI](https://agentprime.io/advisories/CVE-2026-82433.md)
  `CVE-2026-82433` · CVE record: Apache Software Foundation Apache Storm Nimbus and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Hard-coded credentials, Broken access control
- [Apache Storm Nimbus: Blobstore Authorization Bypass via Rebalance Configuration Overrides](https://agentprime.io/advisories/CVE-2026-82432.md)
  `CVE-2026-82432` · CVE record: Apache Software Foundation Apache Storm Nimbus · CVSS 8.1 High · Not analysed yet · Published 14 Sept 2026 · Tags: Broken access control
- [Apache Storm Nimbus, Apache Storm Client: Disclosure of the Topology ZooKeeper Credential to Read-Only Users and to Logs](https://agentprime.io/advisories/CVE-2026-82434.md)
  `CVE-2026-82434` · CVE record: Apache Software Foundation Apache Storm Nimbus and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Sept 2026 · Tags: Hard-coded credentials, Information disclosure
- [Apache Storm Nimbus: Arbitrary File Read on Nimbus via Unvalidated Uploaded Jar Location](https://agentprime.io/advisories/CVE-2026-82426.md)
  `CVE-2026-82426` · CVE record: Apache Software Foundation Apache Storm Nimbus · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Path traversal
- [Apache Storm Nimbus: Cross-Tenant Blob Deletion and Cluster Denial of Service via Unvalidated Topology Dependency Keys](https://agentprime.io/advisories/CVE-2026-82441.md)
  `CVE-2026-82441` · CVE record: Apache Software Foundation Apache Storm Nimbus · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Sept 2026 · Tags: Broken access control, CWE-20
- [Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Merged Daemon Configuration via the Topology Page](https://agentprime.io/advisories/CVE-2026-84179.md)
  `CVE-2026-84179` · CVE record: Apache Software Foundation Apache Storm Nimbus and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Information disclosure, Hard-coded credentials

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=apache-software-foundation-apache-storm-nimbus>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/apache-software-foundation-apache-storm-nimbus/>. Everything for agents: <https://agentprime.io/llms.txt>.