Login Request a demo
NI
Product
Nifi
by Apache · last CVE Sep 16, 2026
59
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities59In the news0Timeline
Severity mix
Critical 5High 26Medium 28Low 0
Severity
All severities59Critical5High26Medium28Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Nifi to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-68979
9.8
1%
Aug 3
Apache NiFi: Missing Authorization for Components Referenced by Parameter Context Updates
Affected: 1.10.0 before 2.11.0
CVE-2018-1309
9.8
5%
May 23
Apache NiFi External XML Entity issue in SplitXML processor
Affected: before 1.6.0
CVE-2017-15697
9.8
5%
Jan 23
A malicious X-ProxyContextPath or X-Forwarded-Context header containing external resources or embedded code could cause remote code execution
Affected: 1.0.0 through 1.4.0
CVE-2017-5636
9.8
4%
Oct 19
In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an injection attack where a carefully…
Affected: 0.7.0; 0.7.1; 1.1.0; 1.1.1
CVE-2026-68980
9.1
0%
Aug 3
Apache NiFi: Authorization Bypass for Parameter Context Asset Deletion
Affected: 2.0.0 before 2.11.0
Showing 5