Login Request a demo
DR
Product
Druid
by Apache · last CVE Feb 10, 2026
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 2High 2Medium 8Low 0
Severity
All severities12Critical2High2Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Druid to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-23906
9.8
1%
Feb 10
Apache Druid: Authentication Bypass via LDAP Anonymous Bind
Affected: 0.17.0 before 36.0.0
CVE-2025-59390
9.8
1%
Nov 26
Apache Druid: Kerberos authenticaton chooses a cryptographically unsecure secret if not configured explicitly.
Affected: before 35.0.0
Showing 2