CVE-2026-96443
Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution on the FE.
CVSS
6.5
Medium
EPSS
0.3%
p26
KEV
—
Exploit Today
8
0-100
Published: Sep 23, 2026 · Last modified: Sep 23, 2026 · CWE-829
0.3%EPSS · 30 days0.3%
2026-09-232026-10-19
Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution on the FE.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-869498.8 HIG—
——0This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox.5hCVE-2026-1113577.0 HIG15.0%
——4Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.4dCVE-2026-1110917.8 HIG2.7%
——1In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration5dCVE-2026-738008.8 HIG44.0%
——13Gitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target event. A fork author can modify a referenced reusable workflow so attacker-controlled code executes with the repository and organization secrets available to that event. Exploitation requires a base workflow that calls a local reusable workflow, and bypasses the intended separation between trusted base code and untrusted fork code.2dCVE-2026-962377.5 HIG44.8%
——13Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.7dCVE-2026-876957.8 HIG13.7%
——4Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.7d