Login Request a demo
AP
Product
apollo
by apolloconfig · last CVE Jul 15, 2026
8
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 4Medium 4Low 0
Severity
All severities8Critical0High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add apollo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-59954
7.5
1%
Jul 15
Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching
Affected: < 2.5.2
CVE-2026-59955
7.5
1%
Jul 15
Apollo ConfigService access key authentication bypass via raw config file appId parsing
Affected: < 2.5.2
CVE-2024-42662
7.5
1%
Aug 20
An issue in apollocongif apollo v.2.2.0 allows a remote attacker to obtain sensitive information via a crafted request
Affected: 2.2.0
CVE-2023-25570
7.5
1%
Feb 20
Apollo is a configuration management system
Affected: before 2.1.0
CVE-2025-32781
6.5
0%
Jul 15
Apollo: Apollo Portal release endpoint allows cross-application configuration disclosure via releaseId
Affected: < 2.5.0
CVE-2023-25569
5.7
0%
Feb 20
Apollo is a configuration management system
Affected: before 2.1.0
CVE-2024-43397
4.3
0%
Aug 20
Potential unauthorized access issue in apollo-portal
Affected: < 2.3.0
CVE-2022-4962
4.3
0%
Jan 12
A vulnerability was found in Apollo 2.0.0/2.0.1 and classified as problematic
Affected: 2.0.0; 2.0.0; 2.0.1
Showing 8