CVE-2026-43869
EUVD-2026-2723705.05.2026, 08:16
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | thrift | 𝑥 < 0.23.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Cryostat 4 on RHEL 9 | 4.2.0-16 ≤ 𝑥 < * | ADP |
| Red Hat | Multicluster Global Hub 1.3.4 | 1779212259 ≤ 𝑥 < * | ADP |
| Red Hat | Multicluster Global Hub 1.5.4 | 1778867753 ≤ 𝑥 < * | ADP |
| Red Hat | Multicluster Global Hub 1.7.1 | 1779925273 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 | 1782383730 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 | 1782693386 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 | 1780677003 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 | 1780926805 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat multicluster global hub 1.4.4 | 1779579439 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat multicluster global hub 1.6.0 | 1780167118 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 2.25 | 1783443816 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift distributed tracing 3.10.1 | 1781589494 ≤ 𝑥 < * | ADP |
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
- CWE-297 - Improper Validation of Certificate with Host MismatchThe software communicates with a host that provides a certificate, but the software does not properly ensure that the certificate is actually associated with that host.
- CWE-295 - Improper Certificate ValidationThe software does not validate, or incorrectly validates, a certificate.
References