Login Request a demo
AD
Product
Apache DolphinScheduler
by Apache Software Foundation · last CVE Oct 8, 2026
25
CVEs
0
On KEV
9.8
Max CVSS
13
New 30D
Vulnerabilities25In the news0Timeline
Severity mix
Critical 2High 9Medium 14Low 0
Severity
All severities25Critical2High9Medium14Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache DolphinScheduler to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-32966
9.8
0%
Jun 17
Apache DolphinScheduler: DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure
Affected: before 3.4.2
CVE-2026-32967
9.1
0%
Jun 17
Apache DolphinScheduler: The `/v2` experimental interface lacks permission checks
Affected: before 3.4.2
Showing 2