Login Request a demo
ST
Product
Storm
by Apache · last CVE Apr 27, 2026
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 4High 5Medium 5Low 0
Severity
All severities14Critical4High5Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Storm to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41081
6.5
0%
Apr 27
Apache Storm Client: Anonymous principal assigned on TLS client certificate verification failure
Affected: before 2.8.7
CVE-2018-1332
6.5
1%
Jun 5
Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose a vulnerability that could allow a user to impersonate another user when…
Affected: through 1.0.6; through 1.1.2; through 1.2.1
CVE-2023-43123
5.5
0%
Nov 23
Apache Storm: Local Information Disclosure Vulnerability in Storm-core on Unix-Like systems due temporary files
Affected: 2.0.0 before 2.6.0
CVE-2018-8008
5.5
2%
Jun 5
Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose an arbitrary file write vulnerability, that can be achieved using a specially…
Affected: through 1.0.6; through 1.1.2; through 1.2.1
CVE-2026-35565
5.4
0%
Apr 13
Apache Storm UI: Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Storm UI
Affected: 2.0.0 before 2.8.6
Showing 5