Login Request a demo
NU
Product
Nutch
by Apache · last CVE Sep 9, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 4High 1Medium 0Low 0
Severity
All severities5Critical4High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Nutch to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41871
9.8
1%
Sep 9
Apache Nutch: Unauthenticated reflection-based job execution in Nutch Server (Nutch REST API)
Affected: 1.10 before 1.23
CVE-2016-6809
9.8
8%
Apr 6
Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files
Affected: 2.3.1
CVE-2026-41869
9.1
1%
Sep 9
Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)
Affected: 1.10 before 1.23
CVE-2021-23901
9.1
4%
Jan 25
An XML external entity (XXE) injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions < 1.18
Affected: before 1.18
CVE-2026-41870
8.8
1%
Sep 9
Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API)
Affected: 1.11 before 1.23
Showing 5