NU
Product
Nutch
by Apache · last CVE Sep 9, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 1Medium 0Low 0
Watch

Add Nutch to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41870
8.8
1%
Sep 9
Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API)
Affected: 1.11 before 1.23
Showing 1