Apache ICS Security Advisories

40 CISA ICS-CERT advisories published for Apache industrial control system products. Data updated every 2 hours.

3
Critical
5
High
2
Medium
1
Low
Severity CVSS Advisory Products Published
NONE 0 HTTP/2 Server: Vulnerability allows Denial of Service
wid-sec-w-2026-2388 · 1 CVE
Traffic Server, Traffic Server, Traffic Server +1 more
2026-07-16
NONE 0 Apache Tomcat: Multiple Vulnerabilities
wid-sec-w-2026-2310 · 2 CVEs
Tomcat, Tomcat, Tomcat +3 more
2026-07-13
NONE 0 Apache HttpComponents Core: Multiple Vulnerabilities allow Denial of Service
wid-sec-w-2026-2172 · 2 CVEs
HttpComponents, HttpComponents, HttpComponents +1 more
2026-07-01
NONE 0 Apache Airflow FTP Provider: Vulnerability allows Offenlegung from Informationen
wid-sec-w-2026-2097 · 1 CVE
Airflow, Airflow
2026-06-25
NONE 0 Apache Nifi: Multiple Vulnerabilities
wid-sec-w-2026-2029 · 4 CVEs
Nifi, Nifi, Nifi +1 more
2026-06-21
NONE 0 Apache HTTP Server: Multiple Vulnerabilities
wid-sec-w-2026-1824 · 13 CVEs
HTTP Server, HTTP Server
2026-06-18
NONE 0 HTTP/2-Implementierungen: Vulnerability allows Denial of Service
wid-sec-w-2026-1791 · 1 CVE
2026-06-18
NONE 0 Apache Airflow: Vulnerability allows Manipulation from Dateien
wid-sec-w-2026-1969 · 1 CVE
Airflow, Airflow
2026-06-16
NONE 0 Apache CXF: Multiple Vulnerabilities
wid-sec-w-2026-1895 · 11 CVEs
CXF, CXF, CXF +1 more
2026-06-14
NONE 0 Apache OFBiz: Multiple Vulnerabilities
wid-sec-w-2026-1888 · 2 CVEs
OFBiz, OFBiz
2026-06-10
NONE 0 Apache Kafka: Vulnerability allows Offenlegung from Informationen
wid-sec-w-2026-1765 · 1 CVE
Kafka
2026-06-02
NONE 0 Apache ActiveMQ: Multiple Vulnerabilities
wid-sec-w-2026-1741 · 6 CVEs
ActiveMQ, ActiveMQ, ActiveMQ +1 more
2026-06-01
NONE 0 Apache Airflow: Multiple Vulnerabilities
wid-sec-w-2026-1761 · 16 CVEs
Airflow, Airflow
2026-05-31
NONE 0 Apache Solr: Vulnerability allows Erlangen from Administratorrechten
wid-sec-w-2026-1740 · 1 CVE
Solr, Solr, Solr +1 more
2026-05-31
NONE 0 Apache Airflow (Google and FAB provider): Multiple Vulnerabilities
wid-sec-w-2026-1660 · 2 CVEs
Airflow, Airflow, Airflow +1 more
2026-05-25
NONE 0 Apache CXF: Multiple Vulnerabilities
wid-sec-w-2026-1659 · 3 CVEs
CXF, CXF, CXF +3 more
2026-05-21
NONE 0 Apache OFBiz: Multiple Vulnerabilities
wid-sec-w-2026-1586 · 14 CVEs
OFBiz, OFBiz
2026-05-18
NONE 0 Apache Camel: Vulnerability allows Umgehen from Sicherheitsvorkehrungen
wid-sec-w-2026-1582 · 1 CVE
Camel, Camel, Camel +3 more
2026-05-18
NONE 0 Apache Tomcat: Multiple Vulnerabilities
wid-sec-w-2026-1514 · 7 CVEs
Tomcat, Tomcat, Tomcat +3 more
2026-05-12
NONE 0 Apache CloudStack: Multiple Vulnerabilities
wid-sec-w-2026-1438 · 7 CVEs
CloudStack, CloudStack, CloudStack +1 more
2026-05-07
CRITICAL 10.0 Apache Camel (Camel-Coap): Vulnerability allows Ausführen from beliebigem Programmcode with den Rechten des Dienstes
wid-sec-w-2026-1286 · 1 CVE
Camel, Camel, Camel +1 more
2026-04-27
CRITICAL 9.9 Apache Camel: Multiple Vulnerabilities
wid-sec-w-2026-1271 · 8 CVEs
Camel, Camel, Camel +7 more
2026-04-27
MEDIUM 4.3 Apache Airflow: Multiple Vulnerabilities allow Offenlegung from Informationen
wid-sec-w-2026-1277 · 2 CVEs
Airflow, Airflow
2026-04-26
NONE 0 Apache ActiveMQ: Multiple Vulnerabilities
wid-sec-w-2026-1258 · 3 CVEs
ActiveMQ, ActiveMQ, ActiveMQ +13 more
2026-04-23
NONE 0 Apache Kafka: Multiple Vulnerabilities
wid-sec-w-2026-1166 · 2 CVEs
Kafka, Kafka, Kafka +5 more
2026-04-16
NONE 0 Apache Airflow: Vulnerability allows Offenlegung from Informationen
wid-sec-w-2026-1158 · 1 CVE
Airflow, Airflow, Airflow +1 more
2026-04-16
NONE 0 Apache Airflow: Vulnerability allows Code execution
wid-sec-w-2026-1123 · 1 CVE
Airflow, Airflow
2026-04-14
NONE 0 Apache log4j: Multiple Vulnerabilities allow Manipulation from Dateien
wid-sec-w-2026-1067 · 5 CVEs
log4j, log4j
2026-04-12
NONE 0 Apache Airflow: Multiple Vulnerabilities
wid-sec-w-2026-1042 · 2 CVEs
Airflow, Airflow
2026-04-09
NONE 0 Apache ActiveMQ: Multiple Vulnerabilities
wid-sec-w-2026-1040 · 2 CVEs
ActiveMQ, ActiveMQ, ActiveMQ +3 more
2026-04-09
NONE 0 Apache Tomcat and Tomcat Native: Multiple Vulnerabilities
wid-sec-w-2026-1038 · 10 CVEs
Tomcat, Tomcat, Tomcat +17 more
2026-04-09
NONE 0 Apache Cassandra: Multiple Vulnerabilities
wid-sec-w-2026-1009 · 3 CVEs
Cassandra, Cassandra, Cassandra +3 more
2026-04-07
HIGH 8.7 Apache Kafka: Vulnerability allows Offenlegung from Informationen
wid-sec-w-2026-0996 · 1 CVE
Kafka, Kafka, Kafka +5 more
2026-04-07
HIGH 8.8 Apache ActiveMQ, Client, Broker and Web: Multiple Vulnerabilities
wid-sec-w-2026-0991 · 2 CVEs
ActiveMQ, ActiveMQ, ActiveMQ +21 more
2026-04-07
HIGH 7.5 Apache Traffic Server: Multiple Vulnerabilities
wid-sec-w-2026-0978 · 2 CVEs
Traffic Server, Traffic Server, Traffic Server +1 more
2026-04-06
MEDIUM 4.8 Apache Airflow: Vulnerability allows Umgehen from Sicherheitsvorkehrungen
wid-sec-w-2026-0916 · 1 CVE
Airflow, Airflow
2026-03-30
LOW 2.3 Apache ActiveMQ Artemis: Vulnerability allows Umgehen from Sicherheitsvorkehrungen
wid-sec-w-2026-0816 · 1 CVE
ActiveMQ, ActiveMQ
2026-03-22
HIGH 8.1 Apache Airflow: Multiple Vulnerabilities
wid-sec-w-2026-0755 · 4 CVEs
Airflow, Airflow
2026-03-16
HIGH 8.8 Apache Airflow: Vulnerability allows Code execution
wid-sec-w-2026-0636 · 1 CVE
Airflow, Airflow
2026-03-08
CRITICAL 9.3 Apache ActiveMQ/Artemis: Multiple Vulnerabilities
wid-sec-w-2026-0591 · 2 CVEs
ActiveMQ, ActiveMQ, ActiveMQ +5 more
2026-03-03

Get Apache Vulnerability Alerts

Don't check manually — OTWarden emails you when CISA publishes new Apache ICS advisories, filtered to your specific equipment.

Start 14-Day Free Trial →