<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: apache-software-foundation-apache-storm-nimbus</title><description>Every new CVE for apache-software-foundation-apache-storm-nimbus.</description><link>https://agentprime.io/</link><item><title>CVE-2026-82427: Apache Storm Nimbus: Path Traversal as the Supervisor User via Unsanitised Blobstore Map Local Name</title><link>https://agentprime.io/advisories/CVE-2026-82427/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-82427/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Sep 2026 14:19:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-82433: Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Daemon Configuration via Nimbus and the UI</title><link>https://agentprime.io/advisories/CVE-2026-82433/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-82433/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Sep 2026 14:12:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-82432: Apache Storm Nimbus: Blobstore Authorization Bypass via Rebalance Configuration Overrides</title><link>https://agentprime.io/advisories/CVE-2026-82432/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-82432/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Sep 2026 14:11:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-82434: Apache Storm Nimbus, Apache Storm Client: Disclosure of the Topology ZooKeeper Credential to Read-Only Users and to Logs</title><link>https://agentprime.io/advisories/CVE-2026-82434/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-82434/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Sep 2026 14:10:15 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-82426: Apache Storm Nimbus: Arbitrary File Read on Nimbus via Unvalidated Uploaded Jar Location</title><link>https://agentprime.io/advisories/CVE-2026-82426/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-82426/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Sep 2026 14:04:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-82441: Apache Storm Nimbus: Cross-Tenant Blob Deletion and Cluster Denial of Service via Unvalidated Topology Dependency Keys</title><link>https://agentprime.io/advisories/CVE-2026-82441/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-82441/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Sep 2026 13:58:56 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-84179: Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Merged Daemon Configuration via the Topology Page</title><link>https://agentprime.io/advisories/CVE-2026-84179/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84179/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Sep 2026 13:57:59 GMT</pubDate><category>CVE</category></item></channel></rss>