Login Request a demo
AD
Product
Apache DolphinScheduler
by Apache Software Foundation · last CVE Oct 8, 2026
30
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Vulnerabilities30In the news0Timeline
Severity mix
Critical 4High 12Medium 14Low 0
Severity
All severities30Critical4High12Medium14Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache DolphinScheduler to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-32966
9.8
0%
Jun 17
Apache DolphinScheduler: DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure
Affected: before 3.4.2
CVE-2024-43166
9.8
1%
Sep 3
Incorrect Default Permissions vulnerability in Apache DolphinScheduler
Affected: before 3.2.2
CVE-2024-43202
9.8
2%
Aug 20
Apache DolphinScheduler: Remote Code Execution Vulnerability
Affected: 3.0.0 before 3.2.2
CVE-2026-32967
9.1
0%
Jun 17
Apache DolphinScheduler: The `/v2` experimental interface lacks permission checks
Affected: before 3.4.2
Showing 4