anonhaven

CVE-2026-96443

NONE
Updated Sep 23, 2026
Apache Software Foundation
Parameter Value
Type CWE-829 (Inclusion of Functionality from Untrusted Source)
Vendor Apache Software Foundation
Public PoC No

Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution on the FE.

Weakness Type (CWE)

CWE-829 Inclusion of Functionality from Untrusted Source

Vulnerable Products

apache software foundation:apache doris

References 1

https://lists.apache.org/thread/vv9o8sxpt8kkd7nznhovn9qjojn2wyv9
NVD
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-94251

Apache Software Foundation

None

CVE-2026-94243

Apache Software Foundation

None

CVE-2026-92001

Apache Software Foundation

None

CVE-2026-91999

Apache Software Foundation

None

CVE-2026-91928

Apache Software Foundation

None