Loading story…
German authorities published advisories for multiple vulnerabilities affecting both Apache HTTP Server and Apache Airflow components, expanding the list of enterprise Apache software requiring review. One notice, dCERT Advisory 2026-1331, covers several flaws in Apache HTTP Server, a widely deployed web server used in internet-facing and internal application environments.
A separate notice, dCERT Advisory 2026-1636, reports multiple vulnerabilities in Apache Airflow provider packages, specifically the Google and FAB providers. While the advisories provided no public synopsis in the referenced notices, the disclosures indicate that organizations using these Apache products should identify affected deployments, review vendor guidance, and prioritize patching or other mitigations for exposed systems and workflow orchestration environments.
See real exploitation activity before you spend the cycle.
2 events from the most recent confirmed update back to the earliest known activity.
dCERT published Advisory 2026-1636 for multiple vulnerabilities affecting Apache Airflow Google and FAB providers. The reference does not include further details on impact, exploitation, or fixes.
dCERT published Advisory 2026-1331 covering multiple vulnerabilities affecting Apache HTTP Server. No additional technical details or remediation information are provided in the reference content.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
German authorities issued advisories for **Apache Airflow** covering a vulnerability that can bypass security measures and a separate notice for **multiple vulnerabilities** affecting the workflow orchestration platform. The alerts indicate that Airflow deployments may be exposed to weaknesses that undermine intended protections and introduce additional security risk across affected environments. Organizations using Apache Airflow should review the referenced advisories, identify affected versions, and prioritize vendor-recommended updates or mitigations. Because Airflow is commonly used to manage automated data pipelines and scheduled jobs, successful exploitation could weaken access controls or expose connected systems and workflows to further compromise.
Jun 29, 2026
German authorities published security advisories for **Apache Traffic Server** and **Apache Tomcat/Tomcat Native**, warning of multiple vulnerabilities affecting the widely used web proxy, caching, and Java application server products. The notices identify separate issues in the two Apache projects, indicating that organizations running these technologies should review vendor guidance and determine whether exposed internet-facing services or internal application platforms are affected. The advisories provide limited public detail, but the affected software is commonly deployed in enterprise web delivery and application environments, raising the risk of service disruption, unauthorized access, or further compromise if vulnerable instances remain unpatched. Security teams are expected to prioritize asset identification, apply available updates from the Apache projects and downstream vendors, and monitor systems using **Apache Traffic Server**, **Apache Tomcat**, and **Tomcat Native** for signs of exploitation or abnormal activity.
Jun 29, 2026
The Apache Software Foundation reported handling **376 new vulnerability reports** across **101** top-level projects in 2020, closing 341 cases and assigning **151 CVEs** while adopting new tooling and the CVE automation API to speed disclosure. The report highlighted several high-profile issues, including the Apache Struts flaw tracked as `CVE-2019-0230`, where forced double OGNL evaluation in tag attributes can lead to **remote code execution** in Struts `2.0.0` through `2.5.20`, alongside other notable Apache security events that drew public exploit or proof-of-concept attention. Additional disclosures tied to that period included two Apache Flink directory traversal bugs, `CVE-2020-17518` and `CVE-2020-17519`, affecting exposed REST APIs and enabling arbitrary file write or read access on vulnerable JobManager hosts; Apache said users should upgrade to **Flink 1.11.3 or 1.12.0**. Apache also published `CVE-2020-13951`, a denial-of-service issue in the public NetTest web service of Apache OpenMeetings `4.0.0` through `5.0.0`, and `CVE-2019-0235`, a **CSRF** flaw in Apache OFBiz `17.12.01`, underscoring the breadth of web, file-system, and application-layer risks disclosed across Apache projects.
Aug 15, 2026