CVE-2026-41602

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 7.5EPSS 1%

Published 2026-04-28Updated 2026-04-28

Vulnerability details

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CNAapache

EPSS score history

Sources

3 links

PoC links are not available for guest users. Login to view them.

CVE Organization NVD Analysis RedHat Vuln DB

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated