Login Request a demo
AD
Product
Apache Doris
by Apache Software Foundation · last CVE Sep 23, 2026
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 3High 3Medium 4Low 0
Severity
All severities10Critical3High3Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache Doris to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-72524
8.8
0%
Sep 14
Apache Doris: Authorization bypass allowing a low-privilege user to read/write/drop arbitrary tables
Affected: 3.1.0 through 3.1.*; 4.0.0 through 4.0.7; 4.1.0 through 4.1.3
CVE-2023-41314
8.2
1%
Dec 18
Apache Doris: Missing API authentication allowed DoS
Affected: 1.2.0 through 2.0.3
CVE-2026-31377
7.5
1%
Sep 23
Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta Service
Affected: 2.0.0 before 4.0.8; 4.1.0 before 4.1.4
Showing 3