Login Request a demo
AS
Product
Apache Storm Client
by Apache Software Foundation · last CVE Sep 14, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 2Medium 2Low 0
Severity
All severities5Critical1High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache Storm Client to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-82428
8.8
1%
Sep 14
Apache Storm Client: Cross-Tenant Dependency Jar Substitution via Predictable Blob Keys
Affected: 3.0.0 before 3.1.0
CVE-2026-35337
8.8
1%
Apr 13
Apache Storm Client: RCE through Unsafe Deserialization via Kerberos TGT Credential Handling
Affected: before 2.8.6
Showing 2