AA
Product
Apache APISIX
by Apache Software Foundation · last CVE Oct 1, 2026
On CISA KEVExploited in the wild
27
CVEs
1
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 6High 10Medium 10Low 1
Watch

Add Apache APISIX to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-94220
2.1
0%
Oct 1
Apache APISIX: session fixation issue in feishu-auth and dingtalk-auth plugin
Affected: 3.17.0 through 3.18.0
Showing 1