Login Request a demo
AD
Product
Apache Druid
by Apache Software Foundation · last CVE Feb 10, 2026
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 2High 0Medium 0Low 0
Severity
All severities2Critical2High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache Druid to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-23906
9.8
1%
Feb 10
Apache Druid: Authentication Bypass via LDAP Anonymous Bind
Affected: 0.17.0 before 36.0.0
CVE-2025-59390
9.8
1%
Nov 26
Apache Druid: Kerberos authenticaton chooses a cryptographically unsecure secret if not configured explicitly.
Affected: through 34.0.0
Showing 2