AB
Product
Apache bRPC
by Apache Software Foundation · last CVE Oct 21, 2026
35
CVEs
0
On KEV
7.5
Max CVSS
35
New 30D
Severity mix
Critical 0High 3Medium 4Low 0
Watch

Add Apache bRPC to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-90484
New
6.5
0%
Oct 21
Apache bRPC: Null pointer dereference in MySQL reply parser leading to client crash
Affected: <= 1.11.0 before 1.18.0
CVE-2026-84727
New
5.4
0%
Oct 21
Apache bRPC: Use-After-Free in RTMP Chunk Stream Handling via Abort Message
Affected: before 1.18.0
CVE-2026-82953
New
5.3
0%
Oct 21
Apache bRPC: NULL Pointer Dereference in RTMP createStream Error Path Leading to Remote Denial of Service
Affected: before 1.18.0
CVE-2026-87849
New
4.3
0%
Oct 21
Apache bRPC: Out-of-bounds read via non-object fields in Discovery naming-service reply parsing
Affected: before 1.18.0
Showing 4