Login Request a demo
AS
Product
Apache Storm Nimbus
by Apache Software Foundation · last CVE Sep 14, 2026
7
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 2Medium 4Low 0
Severity
All severities7Critical1High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache Storm Nimbus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-82433
6.5
0%
Sep 14
Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Daemon Configuration via Nimbus and the UI
Affected: 3.0.0 before 3.1.0
CVE-2026-82434
6.5
1%
Sep 14
Apache Storm Nimbus, Apache Storm Client: Disclosure of the Topology ZooKeeper Credential to Read-Only Users and to Logs
Affected: 3.0.0 before 3.1.0
CVE-2026-82426
6.5
0%
Sep 14
Apache Storm Nimbus: Arbitrary File Read on Nimbus via Unvalidated Uploaded Jar Location
Affected: 3.0.0 before 3.1.0
CVE-2026-84179
6.5
0%
Sep 14
Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Merged Daemon Configuration via the Topology Page
Affected: 3.0.0 before 3.1.0
Showing 4