AS
Product
Apache Storm Nimbus
by Apache Software Foundation · last CVE Sep 14, 2026
7
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 4Low 0
Watch

Add Apache Storm Nimbus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-82432
8.1
0%
Sep 14
Apache Storm Nimbus: Blobstore Authorization Bypass via Rebalance Configuration Overrides
Affected: 3.0.0 before 3.1.0
CVE-2026-82427
7.8
0%
Sep 14
Apache Storm Nimbus: Path Traversal as the Supervisor User via Unsanitised Blobstore Map Local Name
Affected: 3.0.0 before 3.1.0
Showing 2