Advisories · Technology

Apache Software Foundation Apache Zeppelin.

Every CVE that names Apache Software Foundation Apache Zeppelin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-44615 CVE record

CVSS 6.5 Medium

Path traversal in NotebookRepo note and folder path composition
- Apache Software Foundation Apache Zeppelin
- Path traversal
Not analysed yet 31 Jul 2026
CVE-2026-44617 CVE record

CVSS 6.5 Medium

Apache Zeppelin: LDAP filter injection in LdapRealm — incomplete fix of CVE-2024-31867
- Apache Software Foundation Apache Zeppelin
- Other injection
Not analysed yet 30 Jul 2026
CVE-2026-44616 CVE record

CVSS 6.5 Medium

Apache Zeppelin: LDAP injection in ActiveDirectoryGroupRealm filter construction
- Apache Software Foundation Apache Zeppelin
- Other injection
Not analysed yet 30 Jul 2026
CVE-2026-44613 CVE record

CVSS 6.1 Medium

Apache Zeppelin: Cross-site request forgery in REST and WebSocket request handling
- Apache Software Foundation Apache Zeppelin
- Cross-site request forgery (CSRF)
Not analysed yet 30 Jul 2026